Behavioral task
behavioral1
Sample
040730d0cc917fc7364f972c8d4ea51e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
040730d0cc917fc7364f972c8d4ea51e.exe
Resource
win10v2004-20231222-en
General
-
Target
040730d0cc917fc7364f972c8d4ea51e
-
Size
266KB
-
MD5
040730d0cc917fc7364f972c8d4ea51e
-
SHA1
ab9faf473d331e7a5b6969119f128143b1e5669a
-
SHA256
dca873bc9bf3ee8ef3619933c788cfd5936a521b073fdfaa46d7572f167d82d9
-
SHA512
46050f033bb7a4956179f326804138e06fe349d39b8cdc6bf0e266a2c2b986ea212b7ce2abdb94fc6fdee39c61e9f6437f9254ec4ad194f6d896e3dd5cafc899
-
SSDEEP
6144:gvfavX+ichXdElWnQmpMdNGvCL8J6sijaRBJwIXhdeZa2HQ:gavlqqmpauM8JAazSg7ejw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 040730d0cc917fc7364f972c8d4ea51e
Files
-
040730d0cc917fc7364f972c8d4ea51e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE