Behavioral task
behavioral1
Sample
49d907527ee9ac241ad73c09cb5527f3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49d907527ee9ac241ad73c09cb5527f3.exe
Resource
win10v2004-20231215-en
General
-
Target
49d907527ee9ac241ad73c09cb5527f3.bin
-
Size
2.7MB
-
MD5
49d907527ee9ac241ad73c09cb5527f3
-
SHA1
8548f550b50c9a038001b78eb1ee56f0b474f5c1
-
SHA256
982b343304af76415b9c290f5e72a78230119b32df10c65b44eec0df1b8feae6
-
SHA512
b500e79d2d2e159314abeaef06915a80ba6883abc1168c9e5ec3ebd01e3532b7c1e0a9898b46df377c9d999ff7d16f9ac59d7ce22e651a47aee140c9c944f54d
-
SSDEEP
49152:fKn9qiEy9tyYL+CW7g6pR9ktBc1+Q4YdxSChG38bDUggR9t:izcC9KHktBcwQDM2YIDULHt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49d907527ee9ac241ad73c09cb5527f3.bin
Files
-
49d907527ee9ac241ad73c09cb5527f3.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE