Behavioral task
behavioral1
Sample
bef40daf09fc7bf67a1960353c0c10b3.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
bef40daf09fc7bf67a1960353c0c10b3.exe
Resource
win10v2004-20240226-en
General
-
Target
bef40daf09fc7bf67a1960353c0c10b3
-
Size
35KB
-
MD5
bef40daf09fc7bf67a1960353c0c10b3
-
SHA1
1c5b6b3f193cea3a019a1679c3563c6d711bdab8
-
SHA256
78359dde79c382b37405595f8b2a3e0b38e68368cd6a8b40b10360cf2aeb5bbe
-
SHA512
d48f73729cb80901d20ae3dcfaaaf52844a6d80cd9851faa55406bdff6d7f3a8e03bf1bedc2971112130a234f84a06e2b5e3db2f5a1c2f454d29479b1833e309
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFKAyDom1cNq:SKcR4mjD9r823FryDom1Iq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bef40daf09fc7bf67a1960353c0c10b3
Files
-
bef40daf09fc7bf67a1960353c0c10b3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE