Behavioral task
behavioral1
Sample
492bc955c0283c148d0d339383093e29.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
492bc955c0283c148d0d339383093e29.exe
Resource
win10v2004-20231215-en
General
-
Target
492bc955c0283c148d0d339383093e29
-
Size
532KB
-
MD5
492bc955c0283c148d0d339383093e29
-
SHA1
f43adc8cc265c0bfff5585fdaa821ef70cdd4f2f
-
SHA256
126eabb1096ee0625c4d828db73fd5cf28e3340c6e39baea808c29b574f6181c
-
SHA512
070805d5e2bdcc13da91a7ccb85cc235228a9a8e8892be28732f01d185b0f9eb6d9d2b39d2d530a1029faef963858c5b205577eb80b0f1715ee37b1d8b155687
-
SSDEEP
12288:sHxh0S/e8da1+b6ynzl7uGfPda1+b6ynzlc:XMaC1hlaCO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 492bc955c0283c148d0d339383093e29
Files
-
492bc955c0283c148d0d339383093e29.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE