Behavioral task
behavioral1
Sample
49ef76a1067cdabaf5bde0950fe64f7b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49ef76a1067cdabaf5bde0950fe64f7b.exe
Resource
win10v2004-20231215-en
General
-
Target
49ef76a1067cdabaf5bde0950fe64f7b
-
Size
12KB
-
MD5
49ef76a1067cdabaf5bde0950fe64f7b
-
SHA1
85b0f4b60523c4a7699791d0d21e3d05fab96aac
-
SHA256
89b7cd0174e14ccf0ca55b1ebbdcd078588dbcb6b7df2926e40c5b68db0410ea
-
SHA512
e6e74482ed11ea3d030c6ba8b9da89ae9a96d2a831d4e8e7fe582ecbb5d57cdfddb64d063292331a30a00ed094e9341a94eba9e6ea322acf009a8571a0f674e3
-
SSDEEP
192:KGItbXbfAckwnYYo3p/GhJ05QZO4FdI0c4pWE2Tg7wzyyTwJJ4eWE:KG0rbHkwnYYs/gZdFdjxpWE2Tcw1TwDh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49ef76a1067cdabaf5bde0950fe64f7b
Files
-
49ef76a1067cdabaf5bde0950fe64f7b.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Sections
UPX0 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE