Behavioral task
behavioral1
Sample
48257e7462e7b1cec72053fffd592411.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48257e7462e7b1cec72053fffd592411.exe
Resource
win10v2004-20231215-en
General
-
Target
48257e7462e7b1cec72053fffd592411
-
Size
1.2MB
-
MD5
48257e7462e7b1cec72053fffd592411
-
SHA1
4ba344947ba38ee25a8f9f53b0b7724729a66701
-
SHA256
92f437abaa3760ec3c4bd33771078898c1e5afca135d44f81be9a8342497d7cf
-
SHA512
8630e9df153ebc78dc9e3ec6f7ada97a69515c8bf14fbf707a16c5681b6f45bd5e9bbedde72da1a0c3ff3683f46266ad83c982127d9a2ee86a5878d464074d58
-
SSDEEP
24576:16WVT6WMaQwV6KSiWQm5ZZBLvcfpHUOLHoQ6Pn/N9QNAzQN:16W4WvE/v5lLEfpHUOboQml90N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48257e7462e7b1cec72053fffd592411
Files
-
48257e7462e7b1cec72053fffd592411.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 652KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE