Behavioral task
behavioral1
Sample
be6b3e4d7f407e9e27b79b7c6c5dbd29d4445f48552fa01a76bca5a6e7296aca.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
be6b3e4d7f407e9e27b79b7c6c5dbd29d4445f48552fa01a76bca5a6e7296aca.exe
Resource
win10v2004-20240419-en
General
-
Target
be6b3e4d7f407e9e27b79b7c6c5dbd29d4445f48552fa01a76bca5a6e7296aca
-
Size
2.7MB
-
MD5
217b22267622642222a6aebadca1e158
-
SHA1
75e9ebf139b929e7159f34292938d89f2c1b554b
-
SHA256
be6b3e4d7f407e9e27b79b7c6c5dbd29d4445f48552fa01a76bca5a6e7296aca
-
SHA512
74e8a2b27a1b7f62e393f62cc7cad96aece7fecd664ea3a5bd19e1663f211c9e0a037455e97ca6eaa9e25c7617061b1b00d3c0d06f5ff74eed1e5e732cde892d
-
SSDEEP
49152:kEj+l7KaZAS5F8vlL2O3s+Z0LIisEzlos2GiBAtH1kz0OW7+8CmFqkC:Zo2638vEQsC0LIisEzx2GixEb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be6b3e4d7f407e9e27b79b7c6c5dbd29d4445f48552fa01a76bca5a6e7296aca
Files
-
be6b3e4d7f407e9e27b79b7c6c5dbd29d4445f48552fa01a76bca5a6e7296aca.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE