Behavioral task
behavioral1
Sample
486f0c6ca6234063c3a5610a38326f8a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
486f0c6ca6234063c3a5610a38326f8a.exe
Resource
win10v2004-20231215-en
General
-
Target
486f0c6ca6234063c3a5610a38326f8a
-
Size
1.1MB
-
MD5
486f0c6ca6234063c3a5610a38326f8a
-
SHA1
1f6dede49f7cd697cde242dea0f608e43c029781
-
SHA256
613d2e78ebb2dd93d640f9ddf417b58f7b3ba38ed2f8279e8b4c362326046bc5
-
SHA512
0def34bb4b2eeb60b794e04908e95f383306c863825da8335386fb608e8ae09e5fe0ac732d3caa5ddfb94a98496106ef548d8df2756b0b591bb4cda3589a8b36
-
SSDEEP
24576:bSLq+YZWXPLBZzYT/sCx27AJ4jDhttfKbZ4rtMZphyiQElmvU0Dl:b5+YZWfLBFYTkuWPTtfNMIdEa7l
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 486f0c6ca6234063c3a5610a38326f8a
Files
-
486f0c6ca6234063c3a5610a38326f8a.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB