Behavioral task
behavioral1
Sample
42dca53195dc32dd1212e8977c639a32.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
42dca53195dc32dd1212e8977c639a32.exe
Resource
win10v2004-20231222-en
General
-
Target
42dca53195dc32dd1212e8977c639a32
-
Size
21KB
-
MD5
42dca53195dc32dd1212e8977c639a32
-
SHA1
208c84148b39d1983f021ea9631416b3c57577ce
-
SHA256
58ad249d6817d3dd68d43b2893c507dbd2d133defe1703c947d07b8ac2ab0cc0
-
SHA512
b72feb45380f5b6c513fbf93079b29a0b10d62920a32e6e8ca01c74bf1490697d66b1b3d0d53fde90aa01458ec459551d8d8d04ca20cd7132d9a04632834bf20
-
SSDEEP
384:p6Eon0ec13qkppYCz7a5A2kK5p2w074WkCvxYVc13qkppYCz7a5A2k:p6xnMYuaCzO5IjJtYuaCzO5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42dca53195dc32dd1212e8977c639a32
Files
-
42dca53195dc32dd1212e8977c639a32.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE