Behavioral task
behavioral1
Sample
042d49482f9d09f9c94d0108691541073c052138766f65dd1d6bd4b3cd04f6bf.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
042d49482f9d09f9c94d0108691541073c052138766f65dd1d6bd4b3cd04f6bf.exe
Resource
win10v2004-20240802-en
General
-
Target
042d49482f9d09f9c94d0108691541073c052138766f65dd1d6bd4b3cd04f6bf
-
Size
130KB
-
MD5
d042752e5239096b53e12f30a5f7eaa6
-
SHA1
593648567854d06a1db11bbae67059be6f10db78
-
SHA256
042d49482f9d09f9c94d0108691541073c052138766f65dd1d6bd4b3cd04f6bf
-
SHA512
22954f0354853719bcc67d25138a4ada2916036bb1423f6618272c1099d033c8ab8f565198b6af5a6dc3e22cd0ff017000e91f6ff376ee32a35cc3c4f48b5cc7
-
SSDEEP
1536:V7Zf/FAxTWoJJZENTBjlZfAt/KeB+wkcRqbdM5EFi01iFHCUiAM:fny1tEBliT+ERqbS5EE01iFHCJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 042d49482f9d09f9c94d0108691541073c052138766f65dd1d6bd4b3cd04f6bf
Files
-
042d49482f9d09f9c94d0108691541073c052138766f65dd1d6bd4b3cd04f6bf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE