Behavioral task
behavioral1
Sample
be44d6c36006627e2069e6d0ea6ba6a0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
be44d6c36006627e2069e6d0ea6ba6a0N.exe
Resource
win10v2004-20240802-en
General
-
Target
be44d6c36006627e2069e6d0ea6ba6a0N.exe
-
Size
34KB
-
MD5
be44d6c36006627e2069e6d0ea6ba6a0
-
SHA1
2585e2f5ac1e3a569e4f675cc1c80e5144563ad1
-
SHA256
cd5af0ba5a1dac3eec61901dbec23dcc436058a46ddfd28ce32dd7a8d0a3d4d3
-
SHA512
f01f81557b46c0fe853d5ad5360b1b4bf1d817b5fbaa12da1de78e1e9b727e7dd934e52129553ffadfdf4dafcc39896dff995760df2c7a1a5191b0179841a402
-
SSDEEP
768:4noSEjp9Plchfr6TUqnbcuyD7UYK4pavvvZeee26666HEEExTtqqqqBttttj:4oSEZWTUUqnouy8YXEvvvZeee5Lttttj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be44d6c36006627e2069e6d0ea6ba6a0N.exe
Files
-
be44d6c36006627e2069e6d0ea6ba6a0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE