Behavioral task
behavioral1
Sample
becd5c3ac6bcdabd65dd7e5d74e72cb9.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
becd5c3ac6bcdabd65dd7e5d74e72cb9.exe
Resource
win10v2004-20240226-en
General
-
Target
becd5c3ac6bcdabd65dd7e5d74e72cb9
-
Size
5KB
-
MD5
becd5c3ac6bcdabd65dd7e5d74e72cb9
-
SHA1
97c7e3c5e101fe2d71378b4a3d0fc6fe0dfd2a42
-
SHA256
e5a17057529adde8d48c1da7b1de23f4ab31cb084f429a15037fdd8d2b437ce3
-
SHA512
afb7244161dc2f4ecc0e642f86027aacc6fab717a08f5f543da01d09ccdb7fb3e657ca175a44ec37fb26acde4292ed59a47dc781b8b3cce9af981b6c70f9fb40
-
SSDEEP
96:my9fhcMDph5mgoyRP7hQKUnYS51/D/ITX7PJPn8ksGFXby6WzP0Jnml+IC9:vfXuylOKUnY61/D/ITX7PF8TG1y6kP0n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource becd5c3ac6bcdabd65dd7e5d74e72cb9
Files
-
becd5c3ac6bcdabd65dd7e5d74e72cb9.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE