Behavioral task
behavioral1
Sample
449882db77489bbba315178118c21872.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
449882db77489bbba315178118c21872.exe
Resource
win10v2004-20231222-en
General
-
Target
449882db77489bbba315178118c21872
-
Size
3.9MB
-
MD5
449882db77489bbba315178118c21872
-
SHA1
b7595122ef7247056a32f8d1c061fbfe0f7b4e20
-
SHA256
eb95ce5ab9b89ac69488037c5fc22a0eb77fbfdcd866bcabc017cc07f5a546b4
-
SHA512
7003145bb13078df9d877744027984b4cd523be34124d025978f286e4dd5965dd81820a88ecf43eb7d9c34edbb49d11d22dbd897b0bc3de9d3fc39d60a045cea
-
SSDEEP
98304:Mkwu7ouDtVTBA9zyULG+ypi2VehU9emB0iA9zyULG+uQb+rc9kA9zyULG+ypi2V4:MLGouDjTezLqTwhrZzLqzncnzLqTwhrQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 449882db77489bbba315178118c21872
Files
-
449882db77489bbba315178118c21872.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE