Behavioral task
behavioral1
Sample
4831cf514b3bc1eff8194f073b8b7660429e1aab5546f34c4941cb3533c04210.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4831cf514b3bc1eff8194f073b8b7660429e1aab5546f34c4941cb3533c04210.exe
Resource
win10v2004-20230703-en
General
-
Target
4831cf514b3bc1eff8194f073b8b7660429e1aab5546f34c4941cb3533c04210
-
Size
15.8MB
-
MD5
b941a9e93ef404199c1a076ced90aaab
-
SHA1
1abe09c73f54a8e9217f8554f2cf360d13dc9f00
-
SHA256
4831cf514b3bc1eff8194f073b8b7660429e1aab5546f34c4941cb3533c04210
-
SHA512
bda4e5af22dc8b11052ed3cd33fffa71a8d6720fc9e4962a19398473a38cc6d8a16dcc72e79fe87782ea7df6d06e40c0b8b245e10a021c978e7f6b5d178c9fe0
-
SSDEEP
98304:j7aAa4vahTttQ+npalwjM+PVC4o4jSz7fA0re/RKEjZk8LwwQAyFAb+T:jKRgm3kfACYjZAwQub+T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4831cf514b3bc1eff8194f073b8b7660429e1aab5546f34c4941cb3533c04210
Files
-
4831cf514b3bc1eff8194f073b8b7660429e1aab5546f34c4941cb3533c04210.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 15.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 15.7MB - Virtual size: 15.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE