Behavioral task
behavioral1
Sample
42302979b8d9709f379222fdd43bcd62.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
42302979b8d9709f379222fdd43bcd62.exe
Resource
win10v2004-20231215-en
General
-
Target
42302979b8d9709f379222fdd43bcd62.exe
-
Size
1.6MB
-
MD5
42302979b8d9709f379222fdd43bcd62
-
SHA1
f04e9a21cfe3e10e2ff205720d25b8a27f3c39e9
-
SHA256
56e07bc922aedb9c7b8ad9d6cc383bd4134faee98a10815b1794e38c4a01ad0e
-
SHA512
d2e3ff18a32af576532978fb8dbe54f9bbeccf5011ba0c1c9ac4adcfa10029790a8832a2c2a4f27c8c3d043aadc511e28f106a963988f0f038a7e09a4ea7ff7b
-
SSDEEP
24576:YoBuSmbSWSPN8XoqJhApwh+e56tq0Ul8KRoOBy6ZiWKpsj2OdDDJVOSKK4pi0R:X8SfN8XnuLegKbZZXKpsjnZqTE2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42302979b8d9709f379222fdd43bcd62.exe
Files
-
42302979b8d9709f379222fdd43bcd62.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB