Behavioral task
behavioral1
Sample
49280a50162587b5954e32858ef49c7f.exe
Resource
win7-20231215-en
General
-
Target
49280a50162587b5954e32858ef49c7f
-
Size
398KB
-
MD5
49280a50162587b5954e32858ef49c7f
-
SHA1
5de24d739ebb9f3f0c1da2f9bf50b95bbf479ca1
-
SHA256
d0700c7bc8062ec1252f3cb8e7088519fff53fec19de746d28282ee2ffda8983
-
SHA512
11ff79677966ce7ef243bc2e788b6699ff2bb38e79010c73c7d0ac6b8694b2c052913346f9fb91f4cea0b635cf591f4c208e8dbe20970c7eca7ab512ce993daa
-
SSDEEP
6144:SmaKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgX:LSmLAuEY71fviagATFmebVQDcYcr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49280a50162587b5954e32858ef49c7f
Files
-
49280a50162587b5954e32858ef49c7f.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE