Behavioral task
behavioral1
Sample
bc6f26467a6f0f28566c90305dcbca40N.exe
Resource
win7-20240729-en
General
-
Target
bc6f26467a6f0f28566c90305dcbca40N.exe
-
Size
157KB
-
MD5
bc6f26467a6f0f28566c90305dcbca40
-
SHA1
a6a93aae123cca0b681196b28a434f7c00d89ced
-
SHA256
7003225033d342198168f9578aa71e8bef8b48f09f1478884ec78b36016abf1f
-
SHA512
6b34b23cb90679a36d13e8a35f908693ea26714ea62e38090074d76a2f592b787acc0e257306054d0f09ac83e2ce4bbfded90f4333e7d72418ac353ec9cff66f
-
SSDEEP
3072:fny1tE42rn/WHIjN3tj6qnv0b2UrXkbvLF:KbE42rn0IjNDv0bNXkbvLF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc6f26467a6f0f28566c90305dcbca40N.exe
Files
-
bc6f26467a6f0f28566c90305dcbca40N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE