Behavioral task
behavioral1
Sample
be4cac2b33154ec1f699b5ae956739d0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be4cac2b33154ec1f699b5ae956739d0.exe
Resource
win10v2004-20240226-en
General
-
Target
be4cac2b33154ec1f699b5ae956739d0
-
Size
103KB
-
MD5
be4cac2b33154ec1f699b5ae956739d0
-
SHA1
0a33bffb9054c0d5b651f246b45bc31ad3ca80eb
-
SHA256
be816e9356b02fd91530df21250ac272ec664e4b1fe1c0af8422e53de0a46ecf
-
SHA512
57fd8b6dfd9d28e5906dcf719b42f22b11088c08d3dc2f54bdc2f6c31ba28fa97734a67039acd5ccc8d0aa3325e0be3a80a2dd6be0ad83575d8694e642da2420
-
SSDEEP
3072:sr3KcWmjRrzS6YTpIfkLl3RJE9q4osbypv:/KYFRheJoPpv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be4cac2b33154ec1f699b5ae956739d0
Files
-
be4cac2b33154ec1f699b5ae956739d0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE