Static task
static1
Behavioral task
behavioral1
Sample
be206b652bd0317e7fadffa91e414f03d33e58640cc40d1f3a62a027378efa81.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
be206b652bd0317e7fadffa91e414f03d33e58640cc40d1f3a62a027378efa81.exe
Resource
win10v2004-20230915-en
General
-
Target
be206b652bd0317e7fadffa91e414f03d33e58640cc40d1f3a62a027378efa81
-
Size
4.0MB
-
MD5
b4b58404542ec0d82edde1a8308b0c22
-
SHA1
5e2376fb01948497cf48d088ab4200e9489b1a65
-
SHA256
be206b652bd0317e7fadffa91e414f03d33e58640cc40d1f3a62a027378efa81
-
SHA512
c67cb344e87eff1502e3290e12894545258500e5f1118753d52a8ed15d548fc7506635aad38dd0cb2162e606abf055b6025ba3364c7c299c8679a70a42c60732
-
SSDEEP
98304:S6xwG+U3XY4FL8VdL0hvADfHrafk0kJIKUjh:twxU44yVdDfLaBb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be206b652bd0317e7fadffa91e414f03d33e58640cc40d1f3a62a027378efa81
Files
-
be206b652bd0317e7fadffa91e414f03d33e58640cc40d1f3a62a027378efa81.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE