Behavioral task
behavioral1
Sample
49ca53b4ff022af5cace6cb36e743ab0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49ca53b4ff022af5cace6cb36e743ab0.exe
Resource
win10v2004-20231215-en
General
-
Target
49ca53b4ff022af5cace6cb36e743ab0
-
Size
11.0MB
-
MD5
49ca53b4ff022af5cace6cb36e743ab0
-
SHA1
fe072784aab1764e7a7527435f5c5c688124afcb
-
SHA256
93c25a1082b3f17b4d4fd53e4cf0d74fc7c73ce975ce63211e516d32d6164095
-
SHA512
309e83eece7dc5ec0dc6cb790fe85a9f44befb4941fe4c2a5d04786c64fdebbba353d7424c8ddc527ec50dc300088b9d9038a93d596c68fdcb8e0434d2a86025
-
SSDEEP
196608:9RTLrWW9bBKIj33FR+6cpdn4seD33FR+6c:z9bBKIz+RpJ4seT+R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49ca53b4ff022af5cace6cb36e743ab0
Files
-
49ca53b4ff022af5cace6cb36e743ab0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE