Behavioral task
behavioral1
Sample
45052711bad088d38a77ef29662fbcca.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
45052711bad088d38a77ef29662fbcca.exe
Resource
win10v2004-20231222-en
General
-
Target
45052711bad088d38a77ef29662fbcca
-
Size
159KB
-
MD5
45052711bad088d38a77ef29662fbcca
-
SHA1
b0aad361444866991d63d55b5336b95006715fab
-
SHA256
abb6c7fa1d03f8fc9a26a54bbe3a265b2f34e6e6fd6a1ad5034b182886afbb0b
-
SHA512
f4d9a672dec245699f9c22bed606d88bbc6c6682dc222ae2f8342d4eab59b2099f685ee712b27ccbf2291a357367aab93a9db3d1840517abb9d271cb7e6c6a28
-
SSDEEP
3072:6MF+PQvIgiqMpRyMfZyveIyaInvK4K3ZO/iio3NScjvGJMwfm2lRgHHToutf7q:68vOJpRy/MfvO3ZOc3gcjv9RHToSfO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45052711bad088d38a77ef29662fbcca
Files
-
45052711bad088d38a77ef29662fbcca.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 155KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE