Behavioral task
behavioral1
Sample
42b0488a07c3e2db6153d829c87b3382.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
42b0488a07c3e2db6153d829c87b3382.exe
Resource
win10v2004-20231215-en
General
-
Target
42b0488a07c3e2db6153d829c87b3382
-
Size
137KB
-
MD5
42b0488a07c3e2db6153d829c87b3382
-
SHA1
ead090dc9cef336d2e4bec0246771413f8dc6e15
-
SHA256
6309bac893eb2b36ae4a292a1cdc1a623e5c0a4e0ba210b8467e195f8ce571bf
-
SHA512
01c32a3a85626ced717a210b97e4c436100ce8c419c513473da812dc96b40986a523b0903a0d974da39e6a9e288a360d2d6fd79d60997510e15cd1b3b1727513
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53Wl:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42b0488a07c3e2db6153d829c87b3382
Files
-
42b0488a07c3e2db6153d829c87b3382.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE