Behavioral task
behavioral1
Sample
4fee0ec6cf1ee03ca0cf71d1c07b4a837be8edbf598602365a8a34321317d853.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4fee0ec6cf1ee03ca0cf71d1c07b4a837be8edbf598602365a8a34321317d853.exe
Resource
win10v2004-20230703-en
General
-
Target
4fee0ec6cf1ee03ca0cf71d1c07b4a837be8edbf598602365a8a34321317d853
-
Size
186KB
-
MD5
b06dc029ec53b0cb790fa2df9ec1a321
-
SHA1
637819f0c91dc7e4ea5821fd81c6d77da48429ee
-
SHA256
4fee0ec6cf1ee03ca0cf71d1c07b4a837be8edbf598602365a8a34321317d853
-
SHA512
e42dbc3e7c85eb0d2a3b45cd3e25730a0e223497c24ac662667e87a3320c68bff5ec80a68ec0840c12f8fa692265c6bf830bd57bc5acf15e07148a4300582729
-
SSDEEP
3072:ss9kCeae8CbLZBxBmuAg0FuzmaYNFfY+Is6oSM8z:ReaSLXRAOzCHq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fee0ec6cf1ee03ca0cf71d1c07b4a837be8edbf598602365a8a34321317d853
Files
-
4fee0ec6cf1ee03ca0cf71d1c07b4a837be8edbf598602365a8a34321317d853.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE