Behavioral task
behavioral1
Sample
45dfc0c4f28fb67ae742b25684475900.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
45dfc0c4f28fb67ae742b25684475900.exe
Resource
win10v2004-20231215-en
General
-
Target
45dfc0c4f28fb67ae742b25684475900
-
Size
238KB
-
MD5
45dfc0c4f28fb67ae742b25684475900
-
SHA1
d9ecc90f80122e54a1e3a5061de853cc112e05f2
-
SHA256
4f8571b0674b8a22324e68d5490d1f830d1f70db59b136c22b9de4d8e88244e7
-
SHA512
6bfae9201aca517ac5efd9b115766bd28111ea3faad3f905fab5de5f9336c7a00f54376e1d59b4e15ca8f59c14881737164fed676b824555857ae813e15bf959
-
SSDEEP
3072:b+xDH6S7q1fFMojXUqjxwanslL09n1vbU9WLchd4cDhSWwikeygdMTTTERqZF+kf:ahHWfFh5q3mnJAFmcD0tXgOT4RK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45dfc0c4f28fb67ae742b25684475900
Files
-
45dfc0c4f28fb67ae742b25684475900.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 161KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE