Behavioral task
behavioral1
Sample
49a422aff7fe197dfea674a5563cb93d1e9c0a9f66c3bcb30492ae37bb431d86.exe
Resource
win7-20240903-en
General
-
Target
49a422aff7fe197dfea674a5563cb93d1e9c0a9f66c3bcb30492ae37bb431d86
-
Size
1.0MB
-
MD5
a91fc70ae2f2dbd6a561575fd3cc187d
-
SHA1
5e6426439170dd5f37989324ac583de363432b40
-
SHA256
49a422aff7fe197dfea674a5563cb93d1e9c0a9f66c3bcb30492ae37bb431d86
-
SHA512
c2e2f316af0b04a5a4f9dfc482847461d64d1d051daaf924bf74d77306898866d18fae9f76f8f47f27bfcb47ef503088ab64a6540b0ef0aa2fda2707e06ba59c
-
SSDEEP
6144:xZHcIX9SSgMW+IFZMbQrkodzb4XsIUYd:xdcIX0vFZJetd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49a422aff7fe197dfea674a5563cb93d1e9c0a9f66c3bcb30492ae37bb431d86
Files
-
49a422aff7fe197dfea674a5563cb93d1e9c0a9f66c3bcb30492ae37bb431d86.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE