Behavioral task
behavioral1
Sample
49cbde616c0b237fcfb09c2d9d310ed215b896ee169400e9b4a13032792d922a.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
49cbde616c0b237fcfb09c2d9d310ed215b896ee169400e9b4a13032792d922a.exe
Resource
win10v2004-20240508-en
General
-
Target
49cbde616c0b237fcfb09c2d9d310ed215b896ee169400e9b4a13032792d922a
-
Size
4.2MB
-
MD5
dfab10fb1db07586f5d13879eb681157
-
SHA1
843aceb79c0208e3c235c8f0f7c6cf3fa3478f0e
-
SHA256
49cbde616c0b237fcfb09c2d9d310ed215b896ee169400e9b4a13032792d922a
-
SHA512
06cb796b7b8c150b33a1b2dc26878041902ee4ebf0a702e836f3b6043c007c02bce4485b1c75373d1bc08a31ba3ad3c791fb720576293ff3464f7220491fbb12
-
SSDEEP
98304:yLGY+3v6y92w3LMj3o+dxCSX68mdvtg0e1Ub/3p9PBz:yLGf/6Y2kgRxCOxSFppz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49cbde616c0b237fcfb09c2d9d310ed215b896ee169400e9b4a13032792d922a
Files
-
49cbde616c0b237fcfb09c2d9d310ed215b896ee169400e9b4a13032792d922a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 938KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE