Behavioral task
behavioral1
Sample
b42b3e533de3ef1cdde51dcbead5e173.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b42b3e533de3ef1cdde51dcbead5e173.exe
Resource
win10v2004-20231215-en
General
-
Target
b42b3e533de3ef1cdde51dcbead5e173
-
Size
10.2MB
-
MD5
b42b3e533de3ef1cdde51dcbead5e173
-
SHA1
26957b4625b6b83534e572fdbfc1c793505adca2
-
SHA256
8b2099c921da85037c0690ac4aac8f3d39170b1be65f032d6ad31f7f43683ed1
-
SHA512
c78613180b3e29d927cd40d4a17c98279eb630e504203f99c24eea02031162de0a3b3bb52ce444abf7cbdd8e635790e7b219f5b97634ce7245d2d7ffc873e9d7
-
SSDEEP
98304:njZHSd1lNxgLPy3xT1oIo79yDW1RYF3tTdTwA02bRxH3xT1oIo79yDW1RYF3:9TLuhc9yDW165Twb2bdhc9yDW1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b42b3e533de3ef1cdde51dcbead5e173
Files
-
b42b3e533de3ef1cdde51dcbead5e173.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE