Behavioral task
behavioral1
Sample
49b25424a69ee0f0fb9a6eea16670fff14a777c176155520d149ec50901b2ccc.exe
Resource
win7-20240903-en
General
-
Target
49b25424a69ee0f0fb9a6eea16670fff14a777c176155520d149ec50901b2ccc
-
Size
2.1MB
-
MD5
db60d3ab77f085ec2f6a61c44f51b716
-
SHA1
07dd459ae2ef64e00f90e5c21629b3e865efce0c
-
SHA256
49b25424a69ee0f0fb9a6eea16670fff14a777c176155520d149ec50901b2ccc
-
SHA512
490eb356064a1e103c3ac6131baf3d663fdda792ae37d8652170bfdae3083869e17a680f559b394992eb29edaf94dae18c52985b3c68dea4ab3ccb8ae2859f9d
-
SSDEEP
49152:GLM6lajDf/9Eh+f2y4HWXSxuMuKqSDAaV6p7JS:GLbe1Myb4Em6pw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49b25424a69ee0f0fb9a6eea16670fff14a777c176155520d149ec50901b2ccc
Files
-
49b25424a69ee0f0fb9a6eea16670fff14a777c176155520d149ec50901b2ccc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE