Behavioral task
behavioral1
Sample
bf80f63c2622d84f1eb12031521e232193c38e0b9fb6d0ac0919b8de8f0241db.exe
Resource
win7-20240903-en
General
-
Target
bf80f63c2622d84f1eb12031521e232193c38e0b9fb6d0ac0919b8de8f0241db.exe
-
Size
3.1MB
-
MD5
a6dd2148993cc41611ff86c1d2d98835
-
SHA1
c6508eb18f49b876443d522fa5843e99a8235a43
-
SHA256
bf80f63c2622d84f1eb12031521e232193c38e0b9fb6d0ac0919b8de8f0241db
-
SHA512
6175da213b23e9f5e335dcfb87f0e7d9397055bb11a7789030300681ccaff88b4faf10b8ee3dd3b9b70cd7d7f95eb62846f1071db7729c906c2d7c702bcbf8a5
-
SSDEEP
98304:qjq3foL7znvMlkLmLff2KFcAOfGDFGLDKewMUXOapNwIZE2WT:5fuvEl4mLXtFcAAKKDnwBuXvT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf80f63c2622d84f1eb12031521e232193c38e0b9fb6d0ac0919b8de8f0241db.exe
Files
-
bf80f63c2622d84f1eb12031521e232193c38e0b9fb6d0ac0919b8de8f0241db.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE