Behavioral task
behavioral1
Sample
48e5a4a16442945adb5523b5ea5bd19d71a1eb8c5d66e7ec92f0999b8e37dcce.exe
Resource
win7-20241010-en
General
-
Target
48e5a4a16442945adb5523b5ea5bd19d71a1eb8c5d66e7ec92f0999b8e37dcce
-
Size
576KB
-
MD5
17a42b598995a90a25ff48f92c133bf7
-
SHA1
3012b547e187ebfbd8399e8576bc56eba49bfa3e
-
SHA256
48e5a4a16442945adb5523b5ea5bd19d71a1eb8c5d66e7ec92f0999b8e37dcce
-
SHA512
7a981fcddcd0af1fe0131e3b28c569fc2310c0fa20f2b83f06de69f1c873410bc7768f31c4942d252b8fe7cfaad03378282a9c4d7ae2b2458db3365a76e8ff00
-
SSDEEP
12288:+NWPkHlUkErBuxQ4uzi6d6dL/yiXLzeMdK6io8levy0FhVlpzkzDDoS8:+NWPkHlUfBgpuPdWzyuDTifgyWlL
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 48e5a4a16442945adb5523b5ea5bd19d71a1eb8c5d66e7ec92f0999b8e37dcce
Files
-
48e5a4a16442945adb5523b5ea5bd19d71a1eb8c5d66e7ec92f0999b8e37dcce.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 572KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE