Behavioral task
behavioral1
Sample
403f0dab847abf56b8a7db50ed985ac6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
403f0dab847abf56b8a7db50ed985ac6.exe
Resource
win10v2004-20231215-en
General
-
Target
403f0dab847abf56b8a7db50ed985ac6
-
Size
353KB
-
MD5
403f0dab847abf56b8a7db50ed985ac6
-
SHA1
ff14dfd656baa313d7cafd3093132b1a8da9e333
-
SHA256
ab4a5baad1fe3bac81759142ed7afa71dfe612b73482a6897824ee0c84748c8e
-
SHA512
e104a8c838ebd40f8789219a8dfab78cba5fc7a2e0c284979d723cc12afba92a3f6b2b2a1528de7315cfaeef1adf86bbcc74474091bb3e0a6d8f8508057ed86e
-
SSDEEP
6144:XUJvo0cuwIlthDwHRwct/BUgP+gJ4xPu8aHKKaYdxfsLPrPwo+:WdcMIRwctZz7JwD1YTfmE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 403f0dab847abf56b8a7db50ed985ac6
Files
-
403f0dab847abf56b8a7db50ed985ac6.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE