Behavioral task
behavioral1
Sample
462bbca480cf3fab5f78793f04968b21.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
462bbca480cf3fab5f78793f04968b21.exe
Resource
win10v2004-20231215-en
General
-
Target
462bbca480cf3fab5f78793f04968b21
-
Size
821KB
-
MD5
462bbca480cf3fab5f78793f04968b21
-
SHA1
b297947efa02f0a9fb3e57e535578cf6ab9c2c3e
-
SHA256
4d50f63da6f616eb27ce12931a4834217af8a512f3cdb209519a71d7b6e932fe
-
SHA512
62ee07838918a2bb04125f2a7004d5d8afe2551b34815590c32b69cb56acffab41b008aefe4204d37e84128d536854a43fed77db0d35d9fe1868649f7fbba744
-
SSDEEP
12288:f1f3rtJMT80fpF6WyWqvyRp6g5dRC+zKUANHksB8CiUU7nxflO9dJ5IECpxOokLf:iweF6Rg5dRC+5ANHkvLxcjukL2CDYO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 462bbca480cf3fab5f78793f04968b21
Files
-
462bbca480cf3fab5f78793f04968b21.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE