Behavioral task
behavioral1
Sample
494f32f7749389e79b611b58b4eb44bda8a7133c78d694a743e042fe978fb095.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
494f32f7749389e79b611b58b4eb44bda8a7133c78d694a743e042fe978fb095.exe
Resource
win10v2004-20231023-en
General
-
Target
494f32f7749389e79b611b58b4eb44bda8a7133c78d694a743e042fe978fb095
-
Size
2.5MB
-
MD5
f18ee0d28d43647f8b8a4af799373e1b
-
SHA1
4654309b0e26b88b5137911d98ada463ed3ff7ff
-
SHA256
494f32f7749389e79b611b58b4eb44bda8a7133c78d694a743e042fe978fb095
-
SHA512
a8ca8734725c3dd4c93a884d842f9c54861e2c2534b13bb1d5a83b62b7cc818301f942bb2a46b97ee87a58cec6c33729a86b4443fb0ed8eaae7d99fe014bdef3
-
SSDEEP
49152:v2VeYVEu6EXB/MKMACvvqU+4wghwqALKCjDr+1dmgIbk:eVHlpdBCXV+4WGt1dAk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 494f32f7749389e79b611b58b4eb44bda8a7133c78d694a743e042fe978fb095
Files
-
494f32f7749389e79b611b58b4eb44bda8a7133c78d694a743e042fe978fb095.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE