Behavioral task
behavioral1
Sample
49225b5b9d6c7eaef6f2414f1a3eb140b64468d87935cf7e72e905c0448c6a77.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
49225b5b9d6c7eaef6f2414f1a3eb140b64468d87935cf7e72e905c0448c6a77.exe
Resource
win10v2004-20240802-en
General
-
Target
49225b5b9d6c7eaef6f2414f1a3eb140b64468d87935cf7e72e905c0448c6a77
-
Size
1.0MB
-
MD5
c8cb28398aac524f03dd2b6f43fd1115
-
SHA1
b305b42d34df281e9e21b16f6bbcc6ea21fecf64
-
SHA256
49225b5b9d6c7eaef6f2414f1a3eb140b64468d87935cf7e72e905c0448c6a77
-
SHA512
c088ccb95bae6348a808e536e6c1eb4821b741cc306dbc03df864c1d8eb9eea92949da19e113c2f7910060dc7c8b85a9cf23ae086e46dd509ce79c0e11608c8e
-
SSDEEP
24576:hTUBuLHHCHL1p9b/0Iv5du9dur5Ew2QyjqJB9q6j+ZgBptGA:N5Hyf9n4du5sUb+CBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49225b5b9d6c7eaef6f2414f1a3eb140b64468d87935cf7e72e905c0448c6a77
Files
-
49225b5b9d6c7eaef6f2414f1a3eb140b64468d87935cf7e72e905c0448c6a77.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE