Behavioral task
behavioral1
Sample
bac1833582d558d56e99596b6e0eb1544b8d2bd9a5073bbfac5acb81b21da40dN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bac1833582d558d56e99596b6e0eb1544b8d2bd9a5073bbfac5acb81b21da40dN.exe
Resource
win10v2004-20240910-en
General
-
Target
bac1833582d558d56e99596b6e0eb1544b8d2bd9a5073bbfac5acb81b21da40dN
-
Size
655KB
-
MD5
6d803ffc1a4b5398036b888c9eef45f0
-
SHA1
e685f40afeaaf1e219283e25b5b61d1634f70770
-
SHA256
bac1833582d558d56e99596b6e0eb1544b8d2bd9a5073bbfac5acb81b21da40d
-
SHA512
39cb0eae591e8cc02be15849ce3aa4ac5628e62cf70dc004aca94ea2bba18cd7ba737790cb376a92d11949e8cf23489b193ac99e6f20d0c3dadeb9445cc2d60a
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFW:1HNJDMor12mquPZjqI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bac1833582d558d56e99596b6e0eb1544b8d2bd9a5073bbfac5acb81b21da40dN
Files
-
bac1833582d558d56e99596b6e0eb1544b8d2bd9a5073bbfac5acb81b21da40dN.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE