Behavioral task
behavioral1
Sample
be3adc33bcf98f45618a7faa51407eaabca8daeea991544fa3e6b4f98c9eee48.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be3adc33bcf98f45618a7faa51407eaabca8daeea991544fa3e6b4f98c9eee48.exe
Resource
win10v2004-20240426-en
General
-
Target
be3adc33bcf98f45618a7faa51407eaabca8daeea991544fa3e6b4f98c9eee48
-
Size
4.8MB
-
MD5
01e9f859c1943536e25d14046c5c0593
-
SHA1
5ef34fe7c2fa8ebb68beb2517c59631c05e4797d
-
SHA256
be3adc33bcf98f45618a7faa51407eaabca8daeea991544fa3e6b4f98c9eee48
-
SHA512
cdafefc140c1a879c56ac0206dc04a99e1ac76f3466adae08636838bca1458feff73bc788f6217a14993fa5e0ad38b3d3997e5aa90d34a1ac9aa128cb8e55509
-
SSDEEP
98304:cx+cnLL7NjIkvClAlbS/M7/Ul27Q+D2wCIVzpi2dVf/nU:cccLL7NFlmr1i29AHU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be3adc33bcf98f45618a7faa51407eaabca8daeea991544fa3e6b4f98c9eee48
Files
-
be3adc33bcf98f45618a7faa51407eaabca8daeea991544fa3e6b4f98c9eee48.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 15.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 349KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14.8MB - Virtual size: 14.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE