Behavioral task
behavioral1
Sample
473c9130111aa40e0320b412b930c970.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
473c9130111aa40e0320b412b930c970.exe
Resource
win10v2004-20231222-en
General
-
Target
473c9130111aa40e0320b412b930c970
-
Size
133KB
-
MD5
473c9130111aa40e0320b412b930c970
-
SHA1
e3f9886b515e92cdcf4d4b48cb7529e4ca471bc9
-
SHA256
accb0b921c0d8fb4fcd48ecb92cdb4e5356d31662bf54d70d54536c4a6582f28
-
SHA512
81d529a1946809a72aa5445208bbd77fb7329cc458aab8d9ae907d1419e25574ca49989449bd8316e40d24c308644d2b6baf373acf31564c11b6f2e62e7cefc0
-
SSDEEP
3072:v/daRgO9yT0K3tRHEcu7oj5t7+edMLV3qj3BvK87JKFQ:3d4UoK3/EFon72LRE34S6Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 473c9130111aa40e0320b412b930c970
Files
-
473c9130111aa40e0320b412b930c970.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE