Behavioral task
behavioral1
Sample
4c49cd17a9454777b0dfa5f816b5897541a58182c8921ce7c25a4e2b9a00c3c1.exe
Resource
win7-20240903-en
General
-
Target
4c49cd17a9454777b0dfa5f816b5897541a58182c8921ce7c25a4e2b9a00c3c1
-
Size
82KB
-
MD5
2fa9c07420de10573c542ea5675b823e
-
SHA1
8e33c5d40e26e63089dc591df2c3eb0109335e81
-
SHA256
4c49cd17a9454777b0dfa5f816b5897541a58182c8921ce7c25a4e2b9a00c3c1
-
SHA512
e2b428b3d0ff3c2fbeeba09846fd8b3b05429d49c0fbfc4d19b0b38c9d20c752498fb798fb30158c0d9d72fb9f9295cec193612c971b7b2b65d2d2d1db4b8655
-
SSDEEP
1536:y4E9RM/qdXG7HztuJ1nP6zbwHqHF+xK+YIMNweqGd5f75K:y4ELMSdX0zto16zMIx+YIMNweNd5f7k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c49cd17a9454777b0dfa5f816b5897541a58182c8921ce7c25a4e2b9a00c3c1
Files
-
4c49cd17a9454777b0dfa5f816b5897541a58182c8921ce7c25a4e2b9a00c3c1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE