Behavioral task
behavioral1
Sample
48ddd4e306bbc768a2575042c275e15ef6a6bf372fdb8eafbeedadb7507a2229.exe
Resource
win7-20240708-en
General
-
Target
48ddd4e306bbc768a2575042c275e15ef6a6bf372fdb8eafbeedadb7507a2229
-
Size
123KB
-
MD5
9456c69bcba31fe503fce30dedca1ce3
-
SHA1
0f97cfe083fc665ed4de9682c6152bcf2b2cbd34
-
SHA256
48ddd4e306bbc768a2575042c275e15ef6a6bf372fdb8eafbeedadb7507a2229
-
SHA512
534183977734bc94cdeec9ad16ae411de40e5619abb6c44de95ca3c3639b9ae5db916864cc62eac8814b3315044175a1952be8e87154de7ef4c7d24d9987e4de
-
SSDEEP
3072:uaXwKsbHWPH3dAsPKhQn+nNxAhoK7uo6II1Lt8uhqzsy:ubKEHadcQn+NxAhlz6L1J8HzT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48ddd4e306bbc768a2575042c275e15ef6a6bf372fdb8eafbeedadb7507a2229
Files
-
48ddd4e306bbc768a2575042c275e15ef6a6bf372fdb8eafbeedadb7507a2229.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE