Behavioral task
behavioral1
Sample
40f325c4fe88451e1e89f0c9b0c7f5e64e7840cdb682b9843d523c05e513f5e6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
40f325c4fe88451e1e89f0c9b0c7f5e64e7840cdb682b9843d523c05e513f5e6.exe
Resource
win10v2004-20240802-en
General
-
Target
40f325c4fe88451e1e89f0c9b0c7f5e64e7840cdb682b9843d523c05e513f5e6
-
Size
4.0MB
-
MD5
cf95fcc4cedbb08708b188791a8cea0a
-
SHA1
3ea9b0e1903afbcd2a8eb7a730fa431ec9d75ab8
-
SHA256
40f325c4fe88451e1e89f0c9b0c7f5e64e7840cdb682b9843d523c05e513f5e6
-
SHA512
be086ceb2cae805bd60f3fa3b946a2475c8e68c049a27c16026eae89d8c6835d11ad594c13d530dd2aaeb66d731af51452632048a50245109236af2311959032
-
SSDEEP
98304:Y+S9bgfQIIjGlf44QAy88/pZFcA+/JzF60oVMRuT7mGfVmH6y:rMcIIIjGlffQc8BrcF/JzF6JVLnmKVmv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40f325c4fe88451e1e89f0c9b0c7f5e64e7840cdb682b9843d523c05e513f5e6
Files
-
40f325c4fe88451e1e89f0c9b0c7f5e64e7840cdb682b9843d523c05e513f5e6.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 372KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE