Behavioral task
behavioral1
Sample
492503aa4be0ab2285243538af85e7df.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
492503aa4be0ab2285243538af85e7df.exe
Resource
win10v2004-20231222-en
General
-
Target
492503aa4be0ab2285243538af85e7df
-
Size
132KB
-
MD5
492503aa4be0ab2285243538af85e7df
-
SHA1
0aa165720684a293bd94e3ff1cfc17a730417425
-
SHA256
21d6399bcb5712d5050edb8d194116c1384fcc8aa864a45d840214378ccaf89b
-
SHA512
b53e1826933912bd7f1bc8effb56d73aedf3081ee51c65897ccdae1e9eefc187ed186ac5a14c8850ea6a73266a805f64556d916284845973871b97f9752bcb7f
-
SSDEEP
3072:SKcWmjRrz3ZKcWmjRrz3DzWG3/1YcGYne07hoHEjdbdcqSA:hGyGfztYcRne01oHE1aq3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 492503aa4be0ab2285243538af85e7df
Files
-
492503aa4be0ab2285243538af85e7df.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE