Behavioral task
behavioral1
Sample
498ee1ef71e3db4bd7feb32c59575917.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
498ee1ef71e3db4bd7feb32c59575917.exe
Resource
win10v2004-20231215-en
General
-
Target
498ee1ef71e3db4bd7feb32c59575917
-
Size
118KB
-
MD5
498ee1ef71e3db4bd7feb32c59575917
-
SHA1
e414d4d473a79f97c4da5efb7a67026acada71c3
-
SHA256
fd22e6bd26f47555f326a176fc99c5cf79fd685fdc5c29b574008ffb117155ed
-
SHA512
d47f92e3a4f370ea54eb00df5ad9d71964a128c3a1b4d9edd03089a3fba78d31064e49a33fdf1bcda3fd1b35a4490135ba1a79d22472bae8f812f7b66ef910da
-
SSDEEP
3072:7wpY4kzf5CnmSjiKZ6fc45w22f/MX7kCcdkRK:7wpY4K5KZ6U4Sf0X7nyIK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 498ee1ef71e3db4bd7feb32c59575917
Files
-
498ee1ef71e3db4bd7feb32c59575917.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE