Behavioral task
behavioral1
Sample
bc65acb62595241f3024198d3486d960N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc65acb62595241f3024198d3486d960N.exe
Resource
win10v2004-20240802-en
General
-
Target
bc65acb62595241f3024198d3486d960N.exe
-
Size
70KB
-
MD5
bc65acb62595241f3024198d3486d960
-
SHA1
6ab397873adc55744092c1c4bc013ca83070456a
-
SHA256
cb359f126085e6f05700192250d1d8dce65877a7f95fc1cf402fdd59f9d04ce5
-
SHA512
2afd51359d7830660d52e54a6feac0b8ae827449e2bd8badf735ac638639a4212904c3b5a89c511249388008449fe5e7e5a3df8a6bbdc9638b79c421457033c8
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2re:V7Zf/FAxTWtnMdyGdyoIOI1Qq2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc65acb62595241f3024198d3486d960N.exe
Files
-
bc65acb62595241f3024198d3486d960N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE