Behavioral task
behavioral1
Sample
40e8f680ed165297210da70d5cda5e07.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
40e8f680ed165297210da70d5cda5e07.exe
Resource
win10v2004-20231215-en
General
-
Target
40e8f680ed165297210da70d5cda5e07
-
Size
11.7MB
-
MD5
40e8f680ed165297210da70d5cda5e07
-
SHA1
44209aba6267bbdafd30444c91cca7b41e7af855
-
SHA256
ac9f72d1e7eb6ab817a8df4f2831b4f61cf3553191b5f0520aeb91d4725ef6e9
-
SHA512
d0f424c9edacfafa6505379f9d65d38a119ab2df31407b9c401ef39d78a9904985beae377da61cc8737ed360be99483d9e68d8a7c112b3ea3012d1e98c59f709
-
SSDEEP
196608:OpWGqP3X5Q1gl/iBiPiogl/iBiP35PHy6gUgl/iBiPiogl/iBiP:OpK3JQ12i5o2iwy6gU2i5o2i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40e8f680ed165297210da70d5cda5e07
Files
-
40e8f680ed165297210da70d5cda5e07.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE