Behavioral task
behavioral1
Sample
49a3396c9b5e64c11ead4878759c9a77.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49a3396c9b5e64c11ead4878759c9a77.exe
Resource
win10v2004-20231222-en
General
-
Target
49a3396c9b5e64c11ead4878759c9a77
-
Size
1.3MB
-
MD5
49a3396c9b5e64c11ead4878759c9a77
-
SHA1
cce530cb52d24799c8c518496d6205cc443b8998
-
SHA256
79fc3d09ed93f5ada1321ad127077df5cd9a35bebbeaea84cc96aa7c402bf129
-
SHA512
63023a1763e9a847f00138ace5d16a84dbcdb94cf549a6c4fcdf2963590494d5e31ef3036623e29c7989dc0257f1c848cbd4ec61a5254cc5c8b83d6803fe2f48
-
SSDEEP
24576:r0qX3i22tZk/Ej98GfLHcJyT8aPSzcVFKVj5g2WWDMwh/XjjEbLsMTLGC7BWc:r0qNE5fLHcJyTzUVg2ZN/X3+ZTLGSp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49a3396c9b5e64c11ead4878759c9a77
Files
-
49a3396c9b5e64c11ead4878759c9a77.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE