Behavioral task
behavioral1
Sample
407982a162e6c9fff28a8a1ff6050cef9704df9245004ec3d70b5c8d7a022006.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
407982a162e6c9fff28a8a1ff6050cef9704df9245004ec3d70b5c8d7a022006.exe
Resource
win10v2004-20240226-en
General
-
Target
407982a162e6c9fff28a8a1ff6050cef9704df9245004ec3d70b5c8d7a022006
-
Size
63KB
-
MD5
3bbe9d20fa91fd2d23f9595ce368dca9
-
SHA1
aa19f90402ababdd7760d573f411a964e2f41510
-
SHA256
407982a162e6c9fff28a8a1ff6050cef9704df9245004ec3d70b5c8d7a022006
-
SHA512
71ba8c519341fcb72594606ca9a8eaf914d5b1b30a57d56ac1c763c4d7cbbd381571e66e51a0c0a6a62b067b6a3560eb74a737edbb30cd881d1600b900442bc5
-
SSDEEP
768:rAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGKQLddOW/g4WvU+oej55:sUNHFKQbIkHvGMdO74KP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 407982a162e6c9fff28a8a1ff6050cef9704df9245004ec3d70b5c8d7a022006
Files
-
407982a162e6c9fff28a8a1ff6050cef9704df9245004ec3d70b5c8d7a022006.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE