Behavioral task
behavioral1
Sample
befc6c3e9c42be678edaa8812e71a526.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
befc6c3e9c42be678edaa8812e71a526.exe
Resource
win10v2004-20240226-en
General
-
Target
befc6c3e9c42be678edaa8812e71a526
-
Size
347KB
-
MD5
befc6c3e9c42be678edaa8812e71a526
-
SHA1
57bb87f28b3dbdb7ab2f05f602f94796d5c91dcd
-
SHA256
e7a2da9ef66b6bdf60a55f7df2028b033aa911211956e3d222a6777abd942149
-
SHA512
7169a75e77cf48fe16eec7f50d4e32a74d1a432270c967a274524b54ca19507c02023e3dff06aa416569658b3d390c54ec21a98c1ff5aca034a59247b3b3c24a
-
SSDEEP
6144:hGyGuRE9Ci6PKGxZ9ZPl1R8rF9+TzFDKlDeZXAf0nOtUwysXgjL:h3f8C9SGxZ9ZPberF9kDiGOynL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource befc6c3e9c42be678edaa8812e71a526
Files
-
befc6c3e9c42be678edaa8812e71a526.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE