Behavioral task
behavioral1
Sample
04a5cc42dc0d660913d4aed81fddf5d2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04a5cc42dc0d660913d4aed81fddf5d2.exe
Resource
win10v2004-20231222-en
General
-
Target
04a5cc42dc0d660913d4aed81fddf5d2
-
Size
30KB
-
MD5
04a5cc42dc0d660913d4aed81fddf5d2
-
SHA1
b48a7b70cdbd419770c62adec78aa233d68aab17
-
SHA256
dd459bbba62d7f823d9d91cd5c10fcb0d4b9f9cb2e6526151ff49d110742e723
-
SHA512
3cb30b8e28a7559ca7fb4bc337dc8ab87d9dceda7d2b49e99bb54db0806b476159be2686af95a085f53d021c2449fba5d0ca1f48433ed7ff85efb73948ef4bef
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEF5y:SKcR4mjD9r823FY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04a5cc42dc0d660913d4aed81fddf5d2
Files
-
04a5cc42dc0d660913d4aed81fddf5d2.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE