Behavioral task
behavioral1
Sample
480b78dfe052c9920427d0491fdc7063.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
480b78dfe052c9920427d0491fdc7063.exe
Resource
win10v2004-20231222-en
General
-
Target
480b78dfe052c9920427d0491fdc7063
-
Size
137KB
-
MD5
480b78dfe052c9920427d0491fdc7063
-
SHA1
0adc51d4550999ede667c43e2a1b5fadb482c77a
-
SHA256
3e4bd2cb83fd0cc50c33e54da332d34de13c62b534cfc6680851765dd7c0bb76
-
SHA512
0b060aa59f48941691041a7f37ca5822978133545ad64bd0ff5b9d139ccea3d89a6422925838d936b6cbf307c0a9b36b4999a4115ec124536043450c15fd8c3b
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53Wf:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 480b78dfe052c9920427d0491fdc7063
Files
-
480b78dfe052c9920427d0491fdc7063.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE