Behavioral task
behavioral1
Sample
48274bda6c33c213e8783233da395fbb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48274bda6c33c213e8783233da395fbb.exe
Resource
win10v2004-20231215-en
General
-
Target
48274bda6c33c213e8783233da395fbb
-
Size
29KB
-
MD5
48274bda6c33c213e8783233da395fbb
-
SHA1
a3681b56f78bc8a76f5c096185964f0d77f4fa9e
-
SHA256
85ac5e6183b5bc5d0d52d29078b05a6944d6cb42617a790f80ef2b552cf0ac40
-
SHA512
714d7454ec918932b1c89843d8a47b11d99631f3960530af5b7d868cc4aa60cfa61f295d084356254b9e5e20f713a4329db45f9c43dceb0fc7f5cc23a3c38109
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFe:SKcR4mjD9r823Fe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48274bda6c33c213e8783233da395fbb
Files
-
48274bda6c33c213e8783233da395fbb.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE