Behavioral task
behavioral1
Sample
4e96d7dfda299c4ef9bcfb7bd53a53f5eceb44de9132a18e567c5a9fcc97eee0.exe
Resource
win7-20230712-en
General
-
Target
4e96d7dfda299c4ef9bcfb7bd53a53f5eceb44de9132a18e567c5a9fcc97eee0
-
Size
3.8MB
-
MD5
c16bf71bffc4f927435b42d90f01b7e8
-
SHA1
6db6e05bfd500a6cc98dddf26b9aad3433b9bf0f
-
SHA256
4e96d7dfda299c4ef9bcfb7bd53a53f5eceb44de9132a18e567c5a9fcc97eee0
-
SHA512
0ca6d153cd16e3bfbc8eeda0ba7c8db987761c7f46331a2f4fa1797adab7acb66dbe6b0016cefdb8803ef25263edcef914f2eb4ebfb571ec9301998dd15a20ea
-
SSDEEP
98304:VTlzePkZ8rVneua8tQX/dOKoGBQJ8nYr3x23Mr7th:vzt8rcuCPg/GW5rk8Hth
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e96d7dfda299c4ef9bcfb7bd53a53f5eceb44de9132a18e567c5a9fcc97eee0
Files
-
4e96d7dfda299c4ef9bcfb7bd53a53f5eceb44de9132a18e567c5a9fcc97eee0.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 9.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE