Behavioral task
behavioral1
Sample
44dc0f8b4980ebdb4d6f867205950e0a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
44dc0f8b4980ebdb4d6f867205950e0a.exe
Resource
win10v2004-20231222-en
General
-
Target
44dc0f8b4980ebdb4d6f867205950e0a
-
Size
147KB
-
MD5
44dc0f8b4980ebdb4d6f867205950e0a
-
SHA1
7dca2f121d00356250c222082531a0d6e3409b4f
-
SHA256
7bf72ba67e980e55aa503cbc8d5a882538a360670f018936fabff18dc89b967e
-
SHA512
ae034d0d40fbabbbcd104f348aaadcf0ddf96ccc63eddeeeccbea3904b7e3ed27f3f147a1b7b875ac46818d70e153573d171a9d2f176e380195dace976344ca7
-
SSDEEP
3072:Vlt3Y0LtbYALdEiO0/bMA+RsdUCyXMlybDttv/uDAcRcBcPJYaf:V3Y0LBYAxL/bMA+udUXgybLv/IPLf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44dc0f8b4980ebdb4d6f867205950e0a
Files
-
44dc0f8b4980ebdb4d6f867205950e0a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE