Behavioral task
behavioral1
Sample
48c03a81fdf5f40e18d5725f7f6d67c5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48c03a81fdf5f40e18d5725f7f6d67c5.exe
Resource
win10v2004-20231215-en
General
-
Target
48c03a81fdf5f40e18d5725f7f6d67c5
-
Size
2.6MB
-
MD5
48c03a81fdf5f40e18d5725f7f6d67c5
-
SHA1
fc7127c81ecdfb3d58251a65bf6075b2505b2eaa
-
SHA256
dcc9a0886d91caddb2330c5851efdf052676080417a450fe90c12d066d5263bd
-
SHA512
2781ec9800ee448cf01fe8352c7d45e78ddd214f3c1051eb6a3a24cd0c29cd61e51cb6adeb92c1f97a7f501d6b9e7fecb580d0977e5e196e9ed45b5e36761bb9
-
SSDEEP
49152:SfrWYx2yo08+pdsqny3Uzkiuf4YdXHvay3:8xo0Bny+K33
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48c03a81fdf5f40e18d5725f7f6d67c5
Files
-
48c03a81fdf5f40e18d5725f7f6d67c5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE