Behavioral task
behavioral1
Sample
49e44f4d613c8883b179107c5e38b676.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49e44f4d613c8883b179107c5e38b676.exe
Resource
win10v2004-20231222-en
General
-
Target
49e44f4d613c8883b179107c5e38b676
-
Size
266KB
-
MD5
49e44f4d613c8883b179107c5e38b676
-
SHA1
eaa85e370fe3021ce48af5c4fb3f1efa8940dfa4
-
SHA256
86af5c7d53a50c41af9e18a70e5e0ee8a1d1fddd74511a5a51ed3d8fa1da941c
-
SHA512
b43d0cf2614c7bf3bef46ddf27ee6093dbb2900abfbbdcdda7f62e84b67cfad34bfbdb54bb7dd806d7b69299911bed1da4eddf37d93bc4fce3ee6a67b0cf0115
-
SSDEEP
6144:kLJkgtXBgELhrd/Kt1hTj+jyXyDZPSqtNhj98xwV6l7LQ:kLegtRvd/OTaj5FLJ8uwA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49e44f4d613c8883b179107c5e38b676
Files
-
49e44f4d613c8883b179107c5e38b676.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE