Behavioral task
behavioral1
Sample
40322358068debb7056c3c41934446145516c2353292259b8facd45c12fc570f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
40322358068debb7056c3c41934446145516c2353292259b8facd45c12fc570f.exe
Resource
win10v2004-20230220-en
General
-
Target
40322358068debb7056c3c41934446145516c2353292259b8facd45c12fc570f
-
Size
376KB
-
MD5
75eab65994b46d2d5c50dc220b18a701
-
SHA1
a4177aa412a3ad76e8ff536e381081f1e64b485f
-
SHA256
40322358068debb7056c3c41934446145516c2353292259b8facd45c12fc570f
-
SHA512
ba84cd4a37cc0f6e8538eb68baa918dfd1cac0ced4fff4318148c989cce85020b935350684363b4a1472194812f75d0fa2b6c7378508b2c4ff44dac6879369ea
-
SSDEEP
6144:W/+ATI8aaDKAFmvXXgQFJnrgiNEXE7j6NbcE2yce5FtC/WUhXfDpQgIFIjdHAsW+:lATzaaL0XwQF1M0iNIE2i5jC/WUhtfIy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40322358068debb7056c3c41934446145516c2353292259b8facd45c12fc570f
Files
-
40322358068debb7056c3c41934446145516c2353292259b8facd45c12fc570f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.UPX1 Size: 512B - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 375KB - Virtual size: 391KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE