Behavioral task
behavioral1
Sample
bf2ec6066fe6f0a38d6d5d1c67a401952d73aee4250dc1af8a604b73c7055753.exe
Resource
win7-20240903-en
General
-
Target
bf2ec6066fe6f0a38d6d5d1c67a401952d73aee4250dc1af8a604b73c7055753
-
Size
10.7MB
-
MD5
56336f2506c6bcf93b172b9d75f70b12
-
SHA1
b51437c82322d3a1b4ac8b185ddb3708393e31a8
-
SHA256
bf2ec6066fe6f0a38d6d5d1c67a401952d73aee4250dc1af8a604b73c7055753
-
SHA512
de3129fb5fb9dfcb423a38f76c8e8b42c6dac1f6fa55c2a0ed336bec066e68c4c6e2c47af777cd63edbb919cb7f967475bd53b59ead1413ed19a2676913af3cd
-
SSDEEP
196608:6GgEIGCNGJSn4+rsivKB+o3pUv56toYB5beoCkiTbhaTub8VIH6Op7tq:6GQdNG4is56tjBleoCkIh38VIdZs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf2ec6066fe6f0a38d6d5d1c67a401952d73aee4250dc1af8a604b73c7055753
Files
-
bf2ec6066fe6f0a38d6d5d1c67a401952d73aee4250dc1af8a604b73c7055753.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 568KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 938KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE