Behavioral task
behavioral1
Sample
49eba5ad413b3c136321c77bc3e9ce50b95c267822a53eb12af742491e472652.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
49eba5ad413b3c136321c77bc3e9ce50b95c267822a53eb12af742491e472652.exe
Resource
win10v2004-20240802-en
General
-
Target
49eba5ad413b3c136321c77bc3e9ce50b95c267822a53eb12af742491e472652
-
Size
59KB
-
MD5
68ba0784247505ae36cd06b65ff3c87d
-
SHA1
86251fb18b1b0339a78b6dd011010f9a346a5ef8
-
SHA256
49eba5ad413b3c136321c77bc3e9ce50b95c267822a53eb12af742491e472652
-
SHA512
54bff18aca4078e506291a7fcc3f2e191a15551e4d7cdecb3dcb815637a286792f3fb2c6ff11910747e9816db634b35e6dfc88d93d3733bf682a88a5021c0bee
-
SSDEEP
1536:3+ZgwRdiE8cO4p1xRjfTvSq5r3ZiIZ4nouy8uh1aQS:OeodiUO4p13b9HiIeoutuh1aQS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49eba5ad413b3c136321c77bc3e9ce50b95c267822a53eb12af742491e472652
Files
-
49eba5ad413b3c136321c77bc3e9ce50b95c267822a53eb12af742491e472652.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE