Behavioral task
behavioral1
Sample
42e1e7c9b39be33c71f05b69e89da11f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42e1e7c9b39be33c71f05b69e89da11f.exe
Resource
win10v2004-20231215-en
General
-
Target
42e1e7c9b39be33c71f05b69e89da11f
-
Size
222KB
-
MD5
42e1e7c9b39be33c71f05b69e89da11f
-
SHA1
fac7b68fa7bfadc08d36f432f10fbad4233f194f
-
SHA256
44a28ef16cfecb4c9c196ca7094af28cc4c8d62de12f7190a93bc2065bdbbe03
-
SHA512
9ed40b9fed695822a0d9ef7c3f8a23c6f2ca9235cb9905ff19690750c953c7e001af4025967281a55dd7d458aaec80adc5c9da1188fa707e12b8a20c70d3de36
-
SSDEEP
6144:amm1BnDGGWWf//EObsF4THCl0tekFrrwkIUJ/jtAXiuMprxBaFHoS:IBfWeTsaTHK7srrwkIUJRYXAVYFHoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42e1e7c9b39be33c71f05b69e89da11f
Files
-
42e1e7c9b39be33c71f05b69e89da11f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE