Behavioral task
behavioral1
Sample
bfdef7e0ebae6b3e9d1b1e4042733f2b320b33739aca74497e661345daaa1a41.exe
Resource
win7-20240903-en
General
-
Target
bfdef7e0ebae6b3e9d1b1e4042733f2b320b33739aca74497e661345daaa1a41
-
Size
12.4MB
-
MD5
370c3f0331d8c672a28983b229aec6da
-
SHA1
317cf622c1d4bda289e7317489c50be1cd270518
-
SHA256
bfdef7e0ebae6b3e9d1b1e4042733f2b320b33739aca74497e661345daaa1a41
-
SHA512
51982897d498e19b409c500a1570535291395df5ca1b51d8f18eb17b031a1c149886fb785c66cfe3319dbdd023942cf3b18eba3e5dc7a8df032c1c9c5b6d48ed
-
SSDEEP
393216:8kiwOC27Fa0fQDuoKpHfJqYq/o0e3+/KHbjLoNuHmFG:8mOC2xjY6oU/JqYyb/4naFG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfdef7e0ebae6b3e9d1b1e4042733f2b320b33739aca74497e661345daaa1a41
Files
-
bfdef7e0ebae6b3e9d1b1e4042733f2b320b33739aca74497e661345daaa1a41.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 9.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12.2MB - Virtual size: 12.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE