Behavioral task
behavioral1
Sample
42d7bedc9b3605e8acde0f9dc7092416.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42d7bedc9b3605e8acde0f9dc7092416.exe
Resource
win10v2004-20231215-en
General
-
Target
42d7bedc9b3605e8acde0f9dc7092416
-
Size
4KB
-
MD5
42d7bedc9b3605e8acde0f9dc7092416
-
SHA1
1ebf44b89ab5357a4b09bf4cc4290820d106717c
-
SHA256
e1fd8c7f39d33cfeda0fd09ea225ec27882a9a444f5c8f362fc4eff7b8a65ddd
-
SHA512
b27daba2a47d6c04c1bb825f3f280ab4301b100bd69e63e68c8b7fe512975ab50e9b78ac8f8c79619d22e6dc5d5902b38b01fd6740baa2164bd49b46f6fd7fd1
-
SSDEEP
96:qQF2G4MtUFoaCCQc3k5UtPmgnzeDwQNecOUVVU:qO2CJaCN+GSbnzOh9VC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42d7bedc9b3605e8acde0f9dc7092416
Files
-
42d7bedc9b3605e8acde0f9dc7092416.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE