Behavioral task
behavioral1
Sample
48ab3bf0d743cb02747b543f76478ea1134ea046b3d2d96446e4012cabd37862.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
48ab3bf0d743cb02747b543f76478ea1134ea046b3d2d96446e4012cabd37862.exe
Resource
win10v2004-20240508-en
General
-
Target
48ab3bf0d743cb02747b543f76478ea1134ea046b3d2d96446e4012cabd37862.exe
-
Size
85KB
-
MD5
d0b989be6cd3db962bd0d2275a0a2a90
-
SHA1
59a307be9697303b2a27bc99cb487d645f55e8fa
-
SHA256
48ab3bf0d743cb02747b543f76478ea1134ea046b3d2d96446e4012cabd37862
-
SHA512
372b5f3b4655e88ad7ae078c29b2dbf210a4806a538e9d706aa0ce6a4ca5eb0759e2057fdaafb784417a2e530ae7c0392c5ca248ee5c778efb34f677fe05a7dd
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxFy5gfcL5y5gfcLcwD:fnyiQSoXqeaqen
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48ab3bf0d743cb02747b543f76478ea1134ea046b3d2d96446e4012cabd37862.exe
Files
-
48ab3bf0d743cb02747b543f76478ea1134ea046b3d2d96446e4012cabd37862.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE