Behavioral task
behavioral1
Sample
42fa919dfe1da396e91a689c297e2bdb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42fa919dfe1da396e91a689c297e2bdb.exe
Resource
win10v2004-20231215-en
General
-
Target
42fa919dfe1da396e91a689c297e2bdb.exe
-
Size
957KB
-
MD5
42fa919dfe1da396e91a689c297e2bdb
-
SHA1
16c422b146cb1486f55be763a10f80b9e319ca2e
-
SHA256
a878ec49505d76c5473c7e09ee4de7f2e61caaee3b9fdfbafd6508ffd29af056
-
SHA512
dfa93ba9b6a7d9280838de1116649a7b26e722d09808604e30b0a2e1a5deef21a48a34ee95f7c4a83d2504a16dff4594a287f578ae014b2a76a9958888457c47
-
SSDEEP
24576:Zmd+FlTjG0itY5g5jtY7E3Uh1EIMWJknfe:kd+DTo44UuWJknfe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42fa919dfe1da396e91a689c297e2bdb.exe
Files
-
42fa919dfe1da396e91a689c297e2bdb.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ