Behavioral task
behavioral1
Sample
bebbd690efeeb30f6ee31f54a25ba353194baa87876185cff887062d32a2902b.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
bebbd690efeeb30f6ee31f54a25ba353194baa87876185cff887062d32a2902b.exe
Resource
win10v2004-20240508-en
General
-
Target
bebbd690efeeb30f6ee31f54a25ba353194baa87876185cff887062d32a2902b
-
Size
14.7MB
-
MD5
47a0e486d93e8f526177a13037629752
-
SHA1
74d499442c957b77b3485987d8489b88497d5eb3
-
SHA256
bebbd690efeeb30f6ee31f54a25ba353194baa87876185cff887062d32a2902b
-
SHA512
7085f0f9ac32e538d5730e89e8384ff8ada2f28e1596d91086638b8476cf0e1f0fea740d0b92c982b985186ddd205d254d443afa534e47de4921c168702d88bc
-
SSDEEP
393216:UGGh/+0nvAAWaN6lHIzLzifx8IOxOZGhujtl8:U/v/z6nEYZAujP8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bebbd690efeeb30f6ee31f54a25ba353194baa87876185cff887062d32a2902b
Files
-
bebbd690efeeb30f6ee31f54a25ba353194baa87876185cff887062d32a2902b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma1 Size: 12.7MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE