Behavioral task
behavioral1
Sample
42c95da513133599c1a7421cd5b3e53e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
42c95da513133599c1a7421cd5b3e53e.exe
Resource
win10v2004-20231215-en
General
-
Target
42c95da513133599c1a7421cd5b3e53e
-
Size
2.7MB
-
MD5
42c95da513133599c1a7421cd5b3e53e
-
SHA1
719c91f149d447fef1b2dd4eebe444284e88bb2d
-
SHA256
a00fde5cdeff3b477e1ba5db617cf7765a38bd83bbcd07eebcb0ae3d6503ba51
-
SHA512
9e3e95bab99d3da1b3ec39221d4045fb121b52c85b51db52c69411c359f383db962581bc5fe83e379fe1fb63ff70fef622f9d794c79fb2d1f8d62770ead35caf
-
SSDEEP
49152:7b2ZvqgNbTJkTvKE7nho9pUFdJHGt2mb/HR9+D7LzbzxC4PfKtOxnskSXL0bR5C0:7Gyikb77nhO0Js/HHKxd6Axs3XAd5CD4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42c95da513133599c1a7421cd5b3e53e
Files
-
42c95da513133599c1a7421cd5b3e53e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE