Behavioral task
behavioral1
Sample
40849565f2c8c648faa9e0a0c3f0968a6d416cd9b083db3bb64b0f69ea767f26.exe
Resource
win7-20240729-en
General
-
Target
40849565f2c8c648faa9e0a0c3f0968a6d416cd9b083db3bb64b0f69ea767f26
-
Size
501KB
-
MD5
dcd8bbbe0aa801fddad62f82db00bf62
-
SHA1
9adfb5fe4615e9406b3c591edda88ba86d731829
-
SHA256
40849565f2c8c648faa9e0a0c3f0968a6d416cd9b083db3bb64b0f69ea767f26
-
SHA512
37d0efe19f80b662095c3dd08e9ac8de6600e32f3ed0a8e84bd98fbe4a7309fe9428c1401ad606e04865de9016b4a15bf9cd0e4f17b43ccdfe84f7f64351b5e7
-
SSDEEP
12288:zzH9eebSosRHOYAe02WXoGmp8phwcegSW9jXuj8F6:XHnSoCHOYT01wp8pBznjBI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40849565f2c8c648faa9e0a0c3f0968a6d416cd9b083db3bb64b0f69ea767f26
Files
-
40849565f2c8c648faa9e0a0c3f0968a6d416cd9b083db3bb64b0f69ea767f26.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE