??4CIDEReader@@QAEAAV0@ABV0@@Z
Behavioral task
behavioral1
Sample
acb5249ff6bd27730c7246c327b5aa389f104dfab71fbaab23270afd10a3cba3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
acb5249ff6bd27730c7246c327b5aa389f104dfab71fbaab23270afd10a3cba3.exe
Resource
win10v2004-20230220-en
General
-
Target
acb5249ff6bd27730c7246c327b5aa389f104dfab71fbaab23270afd10a3cba3
-
Size
444KB
-
MD5
60e5cf3b7f1b22a08f1d3ab151692240
-
SHA1
5d4ec178047ea0f0d320025dd323933b6220885f
-
SHA256
acb5249ff6bd27730c7246c327b5aa389f104dfab71fbaab23270afd10a3cba3
-
SHA512
a0e72a70ee6fb0741a2fdb4a2aea5fac970d4d815eb262f63a65a1b674147d44f25f6957c8ac3d2882999cc181ef2d78e5b6181304987e848cfd612d6794ae1f
-
SSDEEP
3072:uH6OPhZQWyduvyU7Jqnvlghuxrndxud67JyQ/wFNwKdN8Tauw5rX2TVPtSSJSi:uH6O0WkuZzI5juUQQYFNwJdtVPnk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acb5249ff6bd27730c7246c327b5aa389f104dfab71fbaab23270afd10a3cba3
Files
-
acb5249ff6bd27730c7246c327b5aa389f104dfab71fbaab23270afd10a3cba3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RY4SHL Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE