Behavioral task
behavioral1
Sample
49552a91eaced05eb84cdbdf04fded7d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49552a91eaced05eb84cdbdf04fded7d.exe
Resource
win10v2004-20231215-en
General
-
Target
49552a91eaced05eb84cdbdf04fded7d
-
Size
501KB
-
MD5
49552a91eaced05eb84cdbdf04fded7d
-
SHA1
c2eeea00ef9af7495f354cbd2ead5b4e6d14f298
-
SHA256
79a35851c7b66cb7d3703648b93574dd0af1d17e6839a1cd3e3312fc341d2658
-
SHA512
bf5db9101e1efbf56c58146b7cf8996a6d77e18d5794d5ef83fceb15354edcdc83b32eead050a010da9244e32558b53e58dd1221e028eac735a6c13d8657d89c
-
SSDEEP
12288:XdncwbFkOVGZ9UuYq3WFsvTIlfzdoRbNkab2/wV9Ib:tnc0C6G/W+q2ew
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49552a91eaced05eb84cdbdf04fded7d
Files
-
49552a91eaced05eb84cdbdf04fded7d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE