Behavioral task
behavioral1
Sample
49d461c005eb6c76e396d9cdef59f4bf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49d461c005eb6c76e396d9cdef59f4bf.exe
Resource
win10v2004-20231222-en
General
-
Target
49d461c005eb6c76e396d9cdef59f4bf
-
Size
402KB
-
MD5
49d461c005eb6c76e396d9cdef59f4bf
-
SHA1
e0f3817f8aac9562105e7a3a07419814909b01f1
-
SHA256
5e9dfc79553d0480f580dbd9ceba0041431fa902a5fe0bb9a0a13d9456c590de
-
SHA512
12cceb219d118bd64b113a4b488068d359a2c1dd9992818b3be6e6812da52353d8ef7c81bd2f652e0191da34a07d61c29015d5f7c52c76a34f025c3548ee87eb
-
SSDEEP
6144:5maKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgl:OSmLAuEY71fviagATFmebVQDcYc5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49d461c005eb6c76e396d9cdef59f4bf
Files
-
49d461c005eb6c76e396d9cdef59f4bf.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE