Behavioral task
behavioral1
Sample
477374948c00cef850ca7133722f0e6e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
477374948c00cef850ca7133722f0e6e.exe
Resource
win10v2004-20231222-en
General
-
Target
477374948c00cef850ca7133722f0e6e
-
Size
266KB
-
MD5
477374948c00cef850ca7133722f0e6e
-
SHA1
d9f56a917b40b9696257915370f13845db874718
-
SHA256
a705acb759fec7bbe7cf50afaf3c689bca58def1312ed58126e1caebc2d34822
-
SHA512
cf2e851ac57489cad15151de1016f3548e40c705eef27d5b926a369f7fb569abe304f4e8740ba341179be2dafb0ee4679d0d4f84db373d3656eaf33c27a4dc88
-
SSDEEP
6144:pkmS+gSzbrD6kPI5r4P7LNXOSmDpePygvuzCRUYp/tBN6joQ:pkmt3zHCrDNWygveCjp/7NUB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 477374948c00cef850ca7133722f0e6e
Files
-
477374948c00cef850ca7133722f0e6e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE