Behavioral task
behavioral1
Sample
bea775053516b64c5cc9439290eeb05e.exe
Resource
win7-20240221-en
General
-
Target
bea775053516b64c5cc9439290eeb05e
-
Size
784KB
-
MD5
bea775053516b64c5cc9439290eeb05e
-
SHA1
04b0dcf359874f3fbe55b31e1e119f149899ab77
-
SHA256
50c36eb2941a093727df389beb3596fa06ed87502564ec1284f94bc060c019a8
-
SHA512
90c6f420aa79871272ac93ccf2bd2363410deef3555367e4dea3cbbe5221b7e6e81c8ff10c70a0769a686ff7eab67286a98f1be045b211744ac7c925fbf80245
-
SSDEEP
12288:kMWq5YzBj5dDLDJOu4IDKbJ53SIPMjARtuzGHjEZPlJFm/OKblksWFd/dOTnpKn:9iHDJ8IeJ95oARtuzGHjITXsWTFObA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bea775053516b64c5cc9439290eeb05e
Files
-
bea775053516b64c5cc9439290eeb05e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE