Behavioral task
behavioral1
Sample
Beyond.Compare.2.5.3_KEYGEN+PATCH-FFF.exe
Resource
win7-20240704-en
General
-
Target
Beyond.Compare.2.5.3_KEYGEN+PATCH-FFF.exe
-
Size
92KB
-
MD5
eb0a476433bdd16f2d129509b11d5183
-
SHA1
49c919890aefdc172b73a9c2a5319c9fb23f0458
-
SHA256
4c9c050a14f71fbd53fd12d7a8cc65a4f0e0605b509d2af82c77fa7f7082c019
-
SHA512
1629d32cee35cacf7701f236323f37587b08e88d7b566bc16bdc4b4b42154f3fb68b79e5f7f1102404700bda5ec3878bab076e1ad247cae1aab3dfff0fcd5bbb
-
SSDEEP
1536:aKbQlSkXm6wFcBNslDXiiV4zzUVkgB25C78ASH2mFKnouy8uD:zbQ/cFM0S848qgB8ZZnFSoutu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Beyond.Compare.2.5.3_KEYGEN+PATCH-FFF.exe
Files
-
Beyond.Compare.2.5.3_KEYGEN+PATCH-FFF.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 88KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE