Behavioral task
behavioral1
Sample
42dae903975dee4db2f11c9bda6ed2b6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42dae903975dee4db2f11c9bda6ed2b6.exe
Resource
win10v2004-20231222-en
General
-
Target
42dae903975dee4db2f11c9bda6ed2b6
-
Size
302KB
-
MD5
42dae903975dee4db2f11c9bda6ed2b6
-
SHA1
eb53fec79d27957751356ba77aba19870cbf7038
-
SHA256
018930bd4bc74e9a86158b85f1fec46a2f5e8f760971f9f499632dfafe4e2046
-
SHA512
fe2619d305802c5ae390daffa878987abe737493ecf7df3850adf002fbc0f6956f307273eba0156ed2bc51e80c8be3d460d2f396d947028cf1fb181abf6956af
-
SSDEEP
6144:iCT4CmPlk+Mr6CqBu0Bv3FhP2TJvI04evXhFmQ:iCXmPp9u0B9x2TJg2Tm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42dae903975dee4db2f11c9bda6ed2b6
Files
-
42dae903975dee4db2f11c9bda6ed2b6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE