Behavioral task
behavioral1
Sample
498dfc0515d3da3b76595742d2992788.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
498dfc0515d3da3b76595742d2992788.exe
Resource
win10v2004-20231222-en
General
-
Target
498dfc0515d3da3b76595742d2992788
-
Size
406KB
-
MD5
498dfc0515d3da3b76595742d2992788
-
SHA1
194056b5864e9827daee0f15e165867155f26fa5
-
SHA256
a5b1ca0f5d3b937a2a502dbb66ba740d2bb88626cdc9842006c68f9e673445f3
-
SHA512
2e5b25d723b8f96f8eb506ee06389bec96fc5f2af752cbbc0bdd2d8dedcbd4e21efa0d206d0edfee1d188f346ae178407aaf56708b6a4bb82da75dd26b7858c9
-
SSDEEP
12288:iICkAKRBl/L1BR1KbzWqviHXZmmuoV8ESK7A:n3hlD1BOYQmrG2A
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 498dfc0515d3da3b76595742d2992788
Files
-
498dfc0515d3da3b76595742d2992788.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 393KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE