Behavioral task
behavioral1
Sample
be3b8864b133b253d2e05e1c20cc48c6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be3b8864b133b253d2e05e1c20cc48c6.exe
Resource
win10v2004-20240226-en
General
-
Target
be3b8864b133b253d2e05e1c20cc48c6
-
Size
477KB
-
MD5
be3b8864b133b253d2e05e1c20cc48c6
-
SHA1
07477563bf7fcbfd6d650786219d25d1da31d253
-
SHA256
7fc49ea37b130fca8fda243fe76d717f676d4524eece859fd67b7759fefd4308
-
SHA512
3ac41ef4df4de55517b787241e05b370d9601d6b5bfdb3890ac40d4dd65876f304fc6d35774fd00aa7d775e169976acf7de915e50b8aee7331f855f205967c13
-
SSDEEP
6144:UdspDeDrxkg/vrMuJIgwhEFHyOrJcX/Pgqwzm5IzkWjS4e4azExBKO1t4Kb70NqH:S8kxNhOZElO5kkWjhD4AOWDLpt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be3b8864b133b253d2e05e1c20cc48c6
Files
-
be3b8864b133b253d2e05e1c20cc48c6.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 172KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE