Behavioral task
behavioral1
Sample
bde242ebcb9fabde1f825a090ea00880N.exe
Resource
win7-20240903-en
General
-
Target
bde242ebcb9fabde1f825a090ea00880N
-
Size
3.3MB
-
MD5
bde242ebcb9fabde1f825a090ea00880
-
SHA1
fd301390d5577b1c435fd3a22765c98ecca58c6a
-
SHA256
054af2a87bf6ba9504ec5b6c57347418f704530517066076bfb46e878b2a78e9
-
SHA512
ae302027969ad9cd3375af2be98c17ad7ea11ccdf06a67a1eb244cc805585b319d289ba45ed7bda39a795180e9f8b233494771b57e0bd32e8ff64f367553379d
-
SSDEEP
98304:aT254waJMkLFIL1BLJWeEdYq5f/0rXp/s:aT259UMkpMLJlEdYSn0zp/s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bde242ebcb9fabde1f825a090ea00880N
Files
-
bde242ebcb9fabde1f825a090ea00880N.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE