Behavioral task
behavioral1
Sample
c49f5e1c8e522d8dea9457a36474a757.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c49f5e1c8e522d8dea9457a36474a757.exe
Resource
win10v2004-20240226-en
General
-
Target
c49f5e1c8e522d8dea9457a36474a757
-
Size
11.0MB
-
MD5
c49f5e1c8e522d8dea9457a36474a757
-
SHA1
1d177d10573d83b82b4a65d0683ad8e0d7603950
-
SHA256
6867e69582bb796be5497d33668261a86e8f11e18b522981ab718a54b71e446b
-
SHA512
5f360914a08e30ffc432ddbb3349cd3cace4eb8d1ae5c30072cd4155bf4f92b80e88728723971cad3e279796f9f6f62b5abee72b23648b84470199a6b7f1b48a
-
SSDEEP
98304:+camxEf8FKIidq35mCckFR+vicS43v3+nwOnuW35mCckFR+vicS43:+caYEeth33FR+6cH+wOr33FR+6c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c49f5e1c8e522d8dea9457a36474a757
Files
-
c49f5e1c8e522d8dea9457a36474a757.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE