Behavioral task
behavioral1
Sample
033491f4fbab0e721e61eb40ea7571a4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
033491f4fbab0e721e61eb40ea7571a4.exe
Resource
win10v2004-20231215-en
General
-
Target
033491f4fbab0e721e61eb40ea7571a4
-
Size
407KB
-
MD5
033491f4fbab0e721e61eb40ea7571a4
-
SHA1
f35471aa10069e8a7289e0bb01999cfbe10ea3a3
-
SHA256
45cea1a9ab01dffa2d16725261a7d68af9432a2d0c95c1f50b76772c05330c03
-
SHA512
1db7cbedb48833734f8f37b3ce4b164351cdb7a8574f880da97bdf3a8c7195a0350868f9f70e345db6f6c5da69d5b2f4b82844ca686a1b2970a58203180a6d3e
-
SSDEEP
12288:bHX4QZ3oCyIGEIt25VM5JGwjyj2OHHli4GRgty:bHX4QZ3QntKV2Uw8VHlaRH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 033491f4fbab0e721e61eb40ea7571a4
Files
-
033491f4fbab0e721e61eb40ea7571a4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 532KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE