Behavioral task
behavioral1
Sample
48a8a2ea034d68e57734e5f3de062d5a19d0112388ff86106bc76fbc96965f5aN.exe
Resource
win7-20240903-en
General
-
Target
48a8a2ea034d68e57734e5f3de062d5a19d0112388ff86106bc76fbc96965f5aN
-
Size
281KB
-
MD5
e4e887699d59385324303a667fd8bb00
-
SHA1
4040047b66e198f7a04b7000ca6314bd633dabe1
-
SHA256
48a8a2ea034d68e57734e5f3de062d5a19d0112388ff86106bc76fbc96965f5a
-
SHA512
24e87ffe9dc3c3c35d68b5c41ba515df8e75199559f98d6c5f3dca9955ef928a9f35fa0119de913be7a8707a252536a294a58e83bc92e2b898950a5effd0e203
-
SSDEEP
6144:7ZC4d3lbxc6wU/UP+XhdMRFD3LAwekt+oSyeNVcW5lHfHv1prsL:Q4dMRU/UP4heFjLDFt+oSAo/IL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48a8a2ea034d68e57734e5f3de062d5a19d0112388ff86106bc76fbc96965f5aN
Files
-
48a8a2ea034d68e57734e5f3de062d5a19d0112388ff86106bc76fbc96965f5aN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE