Behavioral task
behavioral1
Sample
495c4f4f08c67d1a4c7d2efbc69be77e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
495c4f4f08c67d1a4c7d2efbc69be77e.exe
Resource
win10v2004-20231215-en
General
-
Target
495c4f4f08c67d1a4c7d2efbc69be77e
-
Size
133KB
-
MD5
495c4f4f08c67d1a4c7d2efbc69be77e
-
SHA1
41b34432278306432cf723593a74f283fbcfa187
-
SHA256
f9b3342cc277eaa83f128a7be1eba57bc7ca1059d7c250b724338a2968397aa4
-
SHA512
26fd7a1e34967ef8234dbe281c2458bfc138fa44c3f1d6f3ac2710852a62d83f51ba298dad420deba3a1ac6ab97fb3aa4eafb43e5eeac145c5b8059f1b38ade2
-
SSDEEP
3072:EW1204mWtXHjKxzsQHhUQbbqmbxFxgUXErn2Q:x1Y9DK2aUQ3TdcUo2Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 495c4f4f08c67d1a4c7d2efbc69be77e
Files
-
495c4f4f08c67d1a4c7d2efbc69be77e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE