Behavioral task
behavioral1
Sample
473c526a648040381f3ff2e129a12f536af3d03e5bd6b4a18c9cddeda10111d1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
473c526a648040381f3ff2e129a12f536af3d03e5bd6b4a18c9cddeda10111d1.exe
Resource
win10v2004-20230703-en
General
-
Target
473c526a648040381f3ff2e129a12f536af3d03e5bd6b4a18c9cddeda10111d1
-
Size
2.5MB
-
MD5
2bb50ca1ff20fb238ddae1ffb782959a
-
SHA1
d77a2c4b54049b73a30122ff3a75c4ecf679fa0f
-
SHA256
473c526a648040381f3ff2e129a12f536af3d03e5bd6b4a18c9cddeda10111d1
-
SHA512
cdd8a941659bf3b63cdd50055af56fc9ab74021bca57d4a5ce41b5f6580c2e6edc77e7da38bb3d007b52c580c73239f844155db98bec6f8d8ef5fb1d3a243838
-
SSDEEP
49152:HEKYzAEDQo67WsqXXs4wGsqfDMssmepYYN0a7CWjKvkEe2Lk:xLl7kXXs4Y6DzsmzYiWevkYLk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 473c526a648040381f3ff2e129a12f536af3d03e5bd6b4a18c9cddeda10111d1
Files
-
473c526a648040381f3ff2e129a12f536af3d03e5bd6b4a18c9cddeda10111d1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE