Behavioral task
behavioral1
Sample
474e9a078f1916360ca1ba836cfe1cc5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
474e9a078f1916360ca1ba836cfe1cc5.exe
Resource
win10v2004-20231215-en
General
-
Target
474e9a078f1916360ca1ba836cfe1cc5
-
Size
1.3MB
-
MD5
474e9a078f1916360ca1ba836cfe1cc5
-
SHA1
fe04e3094fd65e3a96a265b9fc182b96084ab7a8
-
SHA256
0099fed9fd986507308b3689d46235cbcafa70e10ebf1b4549df20d122f727be
-
SHA512
67e39029e54a811ce35b92f1eed9c61c5b0d3c8266310c6d5290bfe51cbdaa4d60e76191406b760be9b85d24e8ab389a340a35047f2800e1110f54c5263ccdf0
-
SSDEEP
24576:gnVar12BlQ5I6V56bJkMVaRu5soIb9c/xmY9VM1YnVpmvG:gVaxoG9QJkMV12oIRc/Y2S1OV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 474e9a078f1916360ca1ba836cfe1cc5
Files
-
474e9a078f1916360ca1ba836cfe1cc5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE