Behavioral task
behavioral1
Sample
444ba5fbe6bf77a2067767ecc3b5a3ade971ae8e6a475b5f607aa0ee473fc3a2.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
444ba5fbe6bf77a2067767ecc3b5a3ade971ae8e6a475b5f607aa0ee473fc3a2.exe
Resource
win10v2004-20241007-en
General
-
Target
444ba5fbe6bf77a2067767ecc3b5a3ade971ae8e6a475b5f607aa0ee473fc3a2.exe
-
Size
29KB
-
MD5
49100a8e04b4f3d874a4dee6a7dff477
-
SHA1
41e231d234be23cc123bdfbdab0c542f428b6686
-
SHA256
444ba5fbe6bf77a2067767ecc3b5a3ade971ae8e6a475b5f607aa0ee473fc3a2
-
SHA512
100049e2e6f90053243dc77a23dde2707c4f5f40654cc3d678efd375728448f3b1f5f16533ce9b910629ae57a40ec8f4519309bff86e528e9bfc1a94c869ec8b
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/whR:AEwVs+0jNDY1qi/qIr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 444ba5fbe6bf77a2067767ecc3b5a3ade971ae8e6a475b5f607aa0ee473fc3a2.exe
Files
-
444ba5fbe6bf77a2067767ecc3b5a3ade971ae8e6a475b5f607aa0ee473fc3a2.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE