Behavioral task
behavioral1
Sample
442948677cf73e7cb564291ef7b1db60.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
442948677cf73e7cb564291ef7b1db60.exe
Resource
win10v2004-20231201-en
General
-
Target
442948677cf73e7cb564291ef7b1db60
-
Size
302KB
-
MD5
442948677cf73e7cb564291ef7b1db60
-
SHA1
2abd05400fb8ed3dab89eb6db91c44c4895f48aa
-
SHA256
cec63a317d9ef0d720fd64bd1a8db26692a870e2670b501aac2a34c01a83ac7f
-
SHA512
75e7798a166227b3c284bd3b938d7c9cb896e863c48522491d13beca3dd9828d5791141028cbc6b05cc08ea75ba18a31acc49111ef817ad94b1478712235a98b
-
SSDEEP
3072:nThqJMkQORGlPioQEbHCLHKpdOQXiiys4VMMNx3KvBQON23L5jVfSN9TQNN+rQCZ:nMJMxUaCEbuMOQSxqo3iOO4L36zQNmQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 442948677cf73e7cb564291ef7b1db60
Files
-
442948677cf73e7cb564291ef7b1db60.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE