Behavioral task
behavioral1
Sample
439927ce58394a2aebd395aa93bc36f6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
439927ce58394a2aebd395aa93bc36f6.exe
Resource
win10v2004-20231222-en
General
-
Target
439927ce58394a2aebd395aa93bc36f6
-
Size
2.9MB
-
MD5
439927ce58394a2aebd395aa93bc36f6
-
SHA1
871fb633e23dcf3ca5d5a213d191daac4f71292f
-
SHA256
880158ccd84354af3b2b190b766c7cfe581dcdf804ad821c63a3e413f0433772
-
SHA512
5e50e19a21fe268ccdb5e19549fb3e5b302ba0990c045e55f7d9953c03294742c990e87b832ebadeeea6818182999d3440b4acf696e5163a5cb658d834f78ef1
-
SSDEEP
49152:OpK6JsLmPvpfzEZSgBGeykFOeNN74NH5HUyNRcUsCVOzetdZJ:WPxEZSgBGeTF74HBUCczzM3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 439927ce58394a2aebd395aa93bc36f6
Files
-
439927ce58394a2aebd395aa93bc36f6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE