Behavioral task
behavioral1
Sample
45310eb4a67ace1d1391278cf3bb837b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
45310eb4a67ace1d1391278cf3bb837b.exe
Resource
win10v2004-20231215-en
General
-
Target
45310eb4a67ace1d1391278cf3bb837b
-
Size
124KB
-
MD5
45310eb4a67ace1d1391278cf3bb837b
-
SHA1
ccaedd872b7863a3ebe3f956ae53961762ffb782
-
SHA256
ecc74a64d394ae74837f561f456a90d600f663f4f6d05d0dfc79df0056c0f759
-
SHA512
86d8d0bda499ba0704d4837b77c35e0789170b436e0266dd93e2a51ce4e8c354c9ed7d70ce92e35d8436e63d0992720739f33bce1a54314a93d324a95a36bfa7
-
SSDEEP
3072:SKcWmjRrz37N+oN9KKie5DFWCwpMW4IhJElWa9nkAw:hG7NMKieKMt6+S
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45310eb4a67ace1d1391278cf3bb837b
Files
-
45310eb4a67ace1d1391278cf3bb837b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE