Behavioral task
behavioral1
Sample
49ef7358c019e976b350ab5321d3fc0b799874fba7c819d268b4aae296784cfa.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
49ef7358c019e976b350ab5321d3fc0b799874fba7c819d268b4aae296784cfa.exe
Resource
win10v2004-20231023-en
General
-
Target
49ef7358c019e976b350ab5321d3fc0b799874fba7c819d268b4aae296784cfa
-
Size
2.3MB
-
MD5
4db4808eb7a606ff23e66741709cb84a
-
SHA1
1c1d1c719b857d1dddbea52ac2958b554517ac7f
-
SHA256
49ef7358c019e976b350ab5321d3fc0b799874fba7c819d268b4aae296784cfa
-
SHA512
d8e765e82469f1b21fc21bcf16fb48998218883e2453dc8f19b1d00599310215280214f28cd84f0705bd0576bd200c87bfabf23788e32c4fea7a543257affec3
-
SSDEEP
49152:bON7m0/f+btdYGuxKcUxyDlih9tvgN4x0MUj/FDSTEUwl7z0UbizX3AzIfrCC:Ytf+bteBDlu7XFa/FDSTEUwl7z8zgzsf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49ef7358c019e976b350ab5321d3fc0b799874fba7c819d268b4aae296784cfa
Files
-
49ef7358c019e976b350ab5321d3fc0b799874fba7c819d268b4aae296784cfa.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE