Behavioral task
behavioral1
Sample
742e3c489ad5de531455d2d6d7413173.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
742e3c489ad5de531455d2d6d7413173.exe
Resource
win10v2004-20231215-en
General
-
Target
742e3c489ad5de531455d2d6d7413173
-
Size
38KB
-
MD5
742e3c489ad5de531455d2d6d7413173
-
SHA1
e0f45d148c92417bfb7ed0775652f81b75efc6fa
-
SHA256
47cae5a427883fad5b82a32c7242c307ab560c011be73008d71a81501f973228
-
SHA512
e9b5e4fe51d06dcfcc56007ad3d9c41099e12db4e4053dab8e506cab773a522b94bad8607d24d5add592e522311bb2ab0f05b3226b0ca5ef71f053c6c2092892
-
SSDEEP
768:zmOhplcsHvKWzX6HJmFqda7koxnbcuyD7UdOBHGBwzrngXyxMdFO:6OhplcsHv1X6n0rnouy8CNXgXyxMdFO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 742e3c489ad5de531455d2d6d7413173
Files
-
742e3c489ad5de531455d2d6d7413173.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE