Behavioral task
behavioral1
Sample
00bd4f06d2b791df92e9da58a9a0677a04d20df8435665fcb6fc7a1633ad5169.exe
Resource
win7-20241010-en
General
-
Target
00bd4f06d2b791df92e9da58a9a0677a04d20df8435665fcb6fc7a1633ad5169
-
Size
91KB
-
MD5
81936d6aa5b50c68d9ddd2a1154a5770
-
SHA1
96e7fd28c6ce140025989dbfd25ae2a1ddf77dee
-
SHA256
00bd4f06d2b791df92e9da58a9a0677a04d20df8435665fcb6fc7a1633ad5169
-
SHA512
71e44a5be7f6f59e3fd6f88bf20b31da7b2f6649bcfa907f388fe919a51199e19f72602851c3b22e50c680ea909534fd18a8b7adb77ec9314462ea6271ce9d1c
-
SSDEEP
1536:V7Zf/FAxTWoJJ7Ttu8HHr2pzMEaoGgv/O9AKqsiNnO:fny1RzOMeGow3p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00bd4f06d2b791df92e9da58a9a0677a04d20df8435665fcb6fc7a1633ad5169
Files
-
00bd4f06d2b791df92e9da58a9a0677a04d20df8435665fcb6fc7a1633ad5169.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE