Behavioral task
behavioral1
Sample
0426a014825e037971f53f55bc159348.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0426a014825e037971f53f55bc159348.exe
Resource
win10v2004-20231215-en
General
-
Target
0426a014825e037971f53f55bc159348
-
Size
123KB
-
MD5
0426a014825e037971f53f55bc159348
-
SHA1
63e79e9f18101727d6b892ed619172bde32ae446
-
SHA256
e008ccccde52678abd5cde11e629bbdd1559d356e355274e048ee9cf4227d253
-
SHA512
753743418235406a374be28b4ceac1c23c86b111ebdabd14ee4dd8c6a9eb36d1117476eeacdddcdb28f3d34eb7f051aafa225975947fafd107d70af88a01a93f
-
SSDEEP
3072:VVSram5nCTlTeFAEWKGoLSdlSdDpYTyuAxkxfx:Vgp2ytlNSudDpYTyFWfx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0426a014825e037971f53f55bc159348
Files
-
0426a014825e037971f53f55bc159348.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE