Behavioral task
behavioral1
Sample
743460ccca8f2394de391a39bc299808.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
743460ccca8f2394de391a39bc299808.exe
Resource
win10v2004-20231215-en
General
-
Target
743460ccca8f2394de391a39bc299808
-
Size
2.7MB
-
MD5
743460ccca8f2394de391a39bc299808
-
SHA1
b4f063bc852851e801f56aebc86de6437b009ccb
-
SHA256
f9b0d9b3b3587c8e191268e126ae16de323f55d61f507f83c93a079f06f2fba7
-
SHA512
e22aa88ab35d71d0c3fed027a605c405176e9ef95a58ee09118680a7f5d86a37903b5d90366986ce2f56ac66c6c1f2cb2a9cbffe0dae324270d35a2f6fc45d64
-
SSDEEP
49152:WYQM6m5h2Db5YKAuh+IIn9tHc6R9+xVOux1efVLZUksUWMBpEJR9j:G7DmK/5I9tJH6VLuVLZNsUWgpMHj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 743460ccca8f2394de391a39bc299808
Files
-
743460ccca8f2394de391a39bc299808.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE