Behavioral task
behavioral1
Sample
409e215109bb02a8e286dddf2fcf9725.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
409e215109bb02a8e286dddf2fcf9725.exe
Resource
win10v2004-20231215-en
General
-
Target
409e215109bb02a8e286dddf2fcf9725
-
Size
784KB
-
MD5
409e215109bb02a8e286dddf2fcf9725
-
SHA1
716760152d69d728bf572c17bb5d21d9ee33f762
-
SHA256
dc6744793505ec2e2597ce314285b29e4e0219c17bea2723e76a3be7bd2b9e01
-
SHA512
d6f0876cc6ad3fd4948d8d53277e0b701de4a44c734ef6c0923c4f3d940e994c06e472129ad53633d55650596d2f68fe54d5e09ce50aabd451783250bd0f73e3
-
SSDEEP
24576:YLNOXGBoLV0CMX8fYZ+c3bxI0GpoHQuS0i0qLjyx:TT5Rk8poHS0imx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 409e215109bb02a8e286dddf2fcf9725
Files
-
409e215109bb02a8e286dddf2fcf9725.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE