Behavioral task
behavioral1
Sample
2474b093ab667a3d4748b98fd046bf8e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2474b093ab667a3d4748b98fd046bf8e.exe
Resource
win10v2004-20231215-en
General
-
Target
2474b093ab667a3d4748b98fd046bf8e
-
Size
359KB
-
MD5
2474b093ab667a3d4748b98fd046bf8e
-
SHA1
fc90d93d47334d8810523cccb2f019b6ca8a029f
-
SHA256
e77064e8022bc0f79bfb78d114e558db467e278f9a59e6efaedc2592c256acc4
-
SHA512
e4acdf3c08249d74a18304cb2de8af839cabb430c71fb6a4430f496469d4e238e01f12942d3d8ba3daa99f153438b2c4d9dc65b4d5ea422a2b5ea04268ce456d
-
SSDEEP
6144:WYiv2UiHXeoGSYQKZ+AuUX9LDfVzGginGN8dTgGgPfRVz2w2fkKj9YHo:iiHujSYpZ+hUX91zan88xIHrm94o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2474b093ab667a3d4748b98fd046bf8e
Files
-
2474b093ab667a3d4748b98fd046bf8e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 514KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE