Behavioral task
behavioral1
Sample
400983b6a964c9fd56dce91bbf6f99a2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
400983b6a964c9fd56dce91bbf6f99a2.exe
Resource
win10v2004-20231222-en
General
-
Target
400983b6a964c9fd56dce91bbf6f99a2
-
Size
2.6MB
-
MD5
400983b6a964c9fd56dce91bbf6f99a2
-
SHA1
2b69e8bd3ae7de17ddc3eaca6194512ae35826ea
-
SHA256
7f979d1791b7d84802f03bf4ab3cbbf5b889b109331c61bff2ed58c276487150
-
SHA512
4a76ceb3216d5838fc2e8dd612cde239fb66212be3c94dedf64b737a04cf5f59aa3e35713cb328f4dac736a472ac9ae16273ebb8df16e498f36f274dc2a9ef83
-
SSDEEP
49152:D8XBkKFozYFebDuwuMaIHa4W2w1W5/tTMNdF6ay3:IuLHuDfU3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 400983b6a964c9fd56dce91bbf6f99a2
Files
-
400983b6a964c9fd56dce91bbf6f99a2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE