Behavioral task
behavioral1
Sample
42acbc074f3583c38fd8e22d090ffca2.exe
Resource
win7-20231215-en
General
-
Target
42acbc074f3583c38fd8e22d090ffca2
-
Size
1.5MB
-
MD5
42acbc074f3583c38fd8e22d090ffca2
-
SHA1
140b97fd9d6bd8936bf4043a0196d48c8546a90f
-
SHA256
11fc7406a73dee026fad9f6946c23d9ca82c7a8dc076db54aa15046438673633
-
SHA512
116261d77bdde33c471f716aa7618d24dc8122f5e08a5d460e33209fd225bc95c2bc5fd760787495810da2226302dd8793dcb96776e11bf0559425c0d052b3cb
-
SSDEEP
49152:dypLyDZAjdyLrHJOmSPiQK+FmwfcgBC9poL3PA:4p+Mdy/pgiQK+F9flBC9O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42acbc074f3583c38fd8e22d090ffca2
Files
-
42acbc074f3583c38fd8e22d090ffca2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE