Behavioral task
behavioral1
Sample
0438f552e895c577db257f2d029199b8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0438f552e895c577db257f2d029199b8.exe
Resource
win10v2004-20231215-en
General
-
Target
0438f552e895c577db257f2d029199b8
-
Size
2.9MB
-
MD5
0438f552e895c577db257f2d029199b8
-
SHA1
815a9a8fe7e759ebd8c3036c6cf27fd03f6279b4
-
SHA256
15e388a8a81c8a8df849f761ce0041b346fb9b5eee36a4902d3eef58ca2a4066
-
SHA512
51d5bc34047d741b3cb455e5b0d9a38894f2bdc2d981ff173cbf466f8c96b750b13598ae50da3320860fe702b7bbc399d709a8c3770d8af78b918b4f26c66724
-
SSDEEP
49152:hWv/OG0b+b3BtrmOG5tz1dQTP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:h8/BGytrmvh8gg3gnl/IVUs1jePs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0438f552e895c577db257f2d029199b8
Files
-
0438f552e895c577db257f2d029199b8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE