Behavioral task
behavioral1
Sample
be6dc22229bb4b99d13622ae0fe6dc33.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be6dc22229bb4b99d13622ae0fe6dc33.exe
Resource
win10v2004-20240226-en
General
-
Target
be6dc22229bb4b99d13622ae0fe6dc33
-
Size
1.3MB
-
MD5
be6dc22229bb4b99d13622ae0fe6dc33
-
SHA1
ce367907ffe59c1f72f6d6fae8e09d5b339d8d70
-
SHA256
67b29718cd74cc9c531368dcede191d782f9edd3a5a8617a741b89b28eb92d62
-
SHA512
52e414c4bae74e30b930882bb1523e5424d44e1760fa80efd793ba197a2b2b69ff22c8ff5535a47860b6634ae6c5847752bc0c9f91984550cc1e13ea5dafeb5c
-
SSDEEP
24576:ZO4KCQbdn39xi7iL/eoiey58bLJ3WrbtECO+nI+gFWvG:RKDJ9b/5iey58PJ3WHtECOSgF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be6dc22229bb4b99d13622ae0fe6dc33
Files
-
be6dc22229bb4b99d13622ae0fe6dc33.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE