Behavioral task
behavioral1
Sample
be33e2868f5d0470eec0fcdf47bf9474.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
be33e2868f5d0470eec0fcdf47bf9474.exe
Resource
win10v2004-20240226-en
General
-
Target
be33e2868f5d0470eec0fcdf47bf9474
-
Size
1.8MB
-
MD5
be33e2868f5d0470eec0fcdf47bf9474
-
SHA1
a24016f96bd424de020624c19e5187f84cbe9c77
-
SHA256
d7e6020fdcb8b2da767ce0ee0fcd96af014f3ff8f99ec1a0aa51fdb9b9ff0027
-
SHA512
d4bb1a8bd0b372862f3487f449ade2d5ef5372b3e15de815cbe575a1d186a3bc2f71f70e0d6a0e892f1670297e39eaa52b4c0c42d7db0a0a462d14e49f318c59
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHf:SCqm2Jpr0nNM7Dus7Nx2/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be33e2868f5d0470eec0fcdf47bf9474
Files
-
be33e2868f5d0470eec0fcdf47bf9474.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE