Behavioral task
behavioral1
Sample
440c1ecc608e7fbd9580db57b5c560f8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
440c1ecc608e7fbd9580db57b5c560f8.exe
Resource
win10v2004-20231215-en
General
-
Target
440c1ecc608e7fbd9580db57b5c560f8
-
Size
6.0MB
-
MD5
440c1ecc608e7fbd9580db57b5c560f8
-
SHA1
2609f136864f6da00fb99b5a6b5d563df52df66f
-
SHA256
314a0d5959791f34d9b018c6f8b2cd8e2f6deff90bcf9d0dc1fa0e3adf2bedc6
-
SHA512
9d8b3caeb9fca182414fdb1156037ec52de4caea65af133894fbac356769e5a44526fca3b66fb32708be085e8e832a56fb1d92fabcde35229572776e829a88a7
-
SSDEEP
98304:9iiPtto7tUvoTFwcak9i7GiJacakWSQgGZTtSjOuHcak9i7GiJacakwaXJw+x00Z:HtctUvoTFwdTudtzxkjVHdTudK5wF+9/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 440c1ecc608e7fbd9580db57b5c560f8
Files
-
440c1ecc608e7fbd9580db57b5c560f8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE