Behavioral task
behavioral1
Sample
49c500858e97298f87d3a3258442cedb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
49c500858e97298f87d3a3258442cedb.exe
Resource
win10v2004-20231215-en
General
-
Target
49c500858e97298f87d3a3258442cedb
-
Size
15KB
-
MD5
49c500858e97298f87d3a3258442cedb
-
SHA1
a6185d1317e1f3aa66b228466a3120a3ad9a06d8
-
SHA256
fb2c403f168fe5f0d3debac04566cba12c938142b9f83a7f24f19f03fed544b8
-
SHA512
292a3211ae7397f41403c61f849a249274ecea90befd8e6bfca46b0841755fb560f4c31c3bcf1f65976d5f0f5e013e80abdd4a9cfcb230915a5283d2067f7769
-
SSDEEP
192:u26PEtKRxq5Vqe9mPpHPHKvs60GrXkHXs4rp9nvJyRe0TZEhMj2epPg1Tb9m1sJX:uK02+/Kv+Xsupdg5TqhM4pvB6NuQ8T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49c500858e97298f87d3a3258442cedb
Files
-
49c500858e97298f87d3a3258442cedb.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE