Behavioral task
behavioral1
Sample
bd3d1c3909dd73e1cbf85557bed45d575c6cf423dd27b2c33adb9df91ce444c1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bd3d1c3909dd73e1cbf85557bed45d575c6cf423dd27b2c33adb9df91ce444c1.exe
Resource
win10v2004-20241007-en
General
-
Target
bd3d1c3909dd73e1cbf85557bed45d575c6cf423dd27b2c33adb9df91ce444c1
-
Size
59KB
-
MD5
4ac39ecaa5d06ec3d7ef700623309db2
-
SHA1
ba0548fd9c40f4114006f3ef3bdbcabad015be94
-
SHA256
bd3d1c3909dd73e1cbf85557bed45d575c6cf423dd27b2c33adb9df91ce444c1
-
SHA512
a18f33b5a39e6607ecd02bbf58cd174b1c3e37edf0caf59879ea487c4b821c92f8f5f952ab09ef6eab831881f2a440340cd8401bf83d3924d3d403e3c4736851
-
SSDEEP
1536:3+ZgwRdiE8cO4p1xRjfTvSq5r3ZiIZ4nouy8uh1aQk:OeodiUO4p13b9HiIeoutuh1aQk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd3d1c3909dd73e1cbf85557bed45d575c6cf423dd27b2c33adb9df91ce444c1
Files
-
bd3d1c3909dd73e1cbf85557bed45d575c6cf423dd27b2c33adb9df91ce444c1.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE