Behavioral task
behavioral1
Sample
45d3a72c-6a50-4a81-a3b9-ace908c38512.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
45d3a72c-6a50-4a81-a3b9-ace908c38512.exe
Resource
win10v2004-20250314-en
General
-
Target
45d3a72c-6a50-4a81-a3b9-ace908c38512.exe
-
Size
3.1MB
-
MD5
d2998eec163b24057fea5d9c556a3fa6
-
SHA1
dbfa6f3cfa42cbd13d26301e7a92784ef6f9b158
-
SHA256
25168e4761ae95b5db1235c9434e25227c6e0f79043072b7009f716b6d7f87f2
-
SHA512
7f6dd63823232813522eb345b78aad3c0bddd48d8afe55ab5219f6409c54164cbb6fdfb8d1de5223545deba49277cf5bec471bb6a4290b9ae0e08b78b44f66bd
-
SSDEEP
49152:f/afhObtGmV2MAHzLRzg//QJreFRc79R6llmh3szKBq7113VdRq9vOUohWG+:f0hi2MAH+//AeFRc7XEEBG19Vqo0G+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45d3a72c-6a50-4a81-a3b9-ace908c38512.exe
Files
-
45d3a72c-6a50-4a81-a3b9-ace908c38512.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 8.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE