Behavioral task
behavioral1
Sample
047caef6daed57419f4206ee56b51903.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
047caef6daed57419f4206ee56b51903.exe
Resource
win10v2004-20231215-en
General
-
Target
047caef6daed57419f4206ee56b51903
-
Size
2.6MB
-
MD5
047caef6daed57419f4206ee56b51903
-
SHA1
24dfc48c7df668fbd7a38d798783c6085e9d5100
-
SHA256
58eb99aa667e2379c1450e5fb76af0f26666458e2f516b2e651da5c9c464f361
-
SHA512
a97d7dc2717b0cc3a8c69947333416f09237e2777c37db64209e3d7710826b33a221208ddad8029843436bc74904446c088a91252372ca27199dd4b099fb8c3d
-
SSDEEP
49152:Nh9wXiF48EAaBsqezlFEWtjQBxK1hzPH7Weuay3:NMAauuBmHm3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 047caef6daed57419f4206ee56b51903
Files
-
047caef6daed57419f4206ee56b51903.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE