Behavioral task
behavioral1
Sample
49a939bf221c27180d5569a507624a6708472fda2cd9cfcba1713f3d22cff59d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
49a939bf221c27180d5569a507624a6708472fda2cd9cfcba1713f3d22cff59d.exe
Resource
win10v2004-20240412-en
General
-
Target
49a939bf221c27180d5569a507624a6708472fda2cd9cfcba1713f3d22cff59d
-
Size
427KB
-
MD5
0816b5a06ae378759d2b6391bf45cc1c
-
SHA1
05650fdaf2cdd07ac227314e0e347c44ca6ff996
-
SHA256
49a939bf221c27180d5569a507624a6708472fda2cd9cfcba1713f3d22cff59d
-
SHA512
9e8dd452c6893cddd6fd64ca10fa6922ad4b7c5776a64adbf66024ecf38f3a51f3eace851c7c3a7b6a88866ad367b841375235dd9a8dbec6d0d67f799e1e8a53
-
SSDEEP
6144:v2ja0W9vFWhZ4HYaWtsV6gNbncvlNFn9XGTWve/0OvCE3:v6a0W9vF2SLM0NAvlNFn8TWvecOvf3
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49a939bf221c27180d5569a507624a6708472fda2cd9cfcba1713f3d22cff59d
Files
-
49a939bf221c27180d5569a507624a6708472fda2cd9cfcba1713f3d22cff59d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE