Behavioral task
behavioral1
Sample
48cdb6eb16f17b8bc468b0d0c5044322.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48cdb6eb16f17b8bc468b0d0c5044322.exe
Resource
win10v2004-20231215-en
General
-
Target
48cdb6eb16f17b8bc468b0d0c5044322
-
Size
133KB
-
MD5
48cdb6eb16f17b8bc468b0d0c5044322
-
SHA1
9c4dd6eeb0d2d4282ccc4d25460019bb73190bc1
-
SHA256
d9d4872f629e0207b9b6395a77355c4a3e520fbc9733514dd10125a959edfb32
-
SHA512
4c3a454c5ef1299c0049faa8c12b4a2b5a75c12f79bf4e56c6b06f0e59f969bfcd379fd210276c24272c94bb8bbcd4247c17039abdbfbaa8e3926963d41ecf78
-
SSDEEP
3072:iWifXE1G6x7hIxkOsips1xWCrf7TFIm0qZuUrlUg8gTJCQ3ZQ:IE1JEkOs51pzTFVd9lUgf/ZQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48cdb6eb16f17b8bc468b0d0c5044322
Files
-
48cdb6eb16f17b8bc468b0d0c5044322.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE