Behavioral task
behavioral1
Sample
be11c24b9fe3026421434699bec51b0487c37556720a6d1ab2c65d8c46c47fbe.exe
Resource
win7-20240221-en
General
-
Target
be11c24b9fe3026421434699bec51b0487c37556720a6d1ab2c65d8c46c47fbe
-
Size
377KB
-
MD5
d6bc74ef314ea38df7bb23d48afc1254
-
SHA1
9fc25809dc4b7b883a3a321bf2da1c78cabf7ac9
-
SHA256
be11c24b9fe3026421434699bec51b0487c37556720a6d1ab2c65d8c46c47fbe
-
SHA512
6f1081134f630b55fe13c955848579c325c20b24987d638f10b8c2b81a1f4e8230f6a768f68d6bb7ed8f692d83307da3478a795483a63a6b906e60fcc01c04e4
-
SSDEEP
6144:9cm4FmowdHoS4WEkMawdHoSbdwqGw+tw+ttidCy1p:/4wFHoS4WEkMTHoSbG++tw+tYYyj
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be11c24b9fe3026421434699bec51b0487c37556720a6d1ab2c65d8c46c47fbe
Files
-
be11c24b9fe3026421434699bec51b0487c37556720a6d1ab2c65d8c46c47fbe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE