Behavioral task
behavioral1
Sample
4718b51e3ea07387cca50eaa64e04558f7ad200295f9dad2f091a7255a9b70ba.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4718b51e3ea07387cca50eaa64e04558f7ad200295f9dad2f091a7255a9b70ba.exe
Resource
win10v2004-20230703-en
General
-
Target
4718b51e3ea07387cca50eaa64e04558f7ad200295f9dad2f091a7255a9b70ba
-
Size
1.2MB
-
MD5
ff3f13dfdd4af96d0de2564a8ca02fb3
-
SHA1
4abb8016cfe15734a04d3fc7d3ef804431dfb41c
-
SHA256
4718b51e3ea07387cca50eaa64e04558f7ad200295f9dad2f091a7255a9b70ba
-
SHA512
e4b4ff867b0fbe57f65cc9d14c27baa2fa0be1e7e95479fb6d91b56c9ee9b36fce832fbb59e7bbb5d4d5d60855aff77e9d91b56a853b7c963466ba4c0cd1fe97
-
SSDEEP
24576:ym0t2pXm6LaZ731xxftArLKnox8jHq/YsTDUg/khrjurgKdbWxcF5PePoE3Np:yTt2/LC1ZArWnI8Tq/YyDUg/kd9Kd2c0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4718b51e3ea07387cca50eaa64e04558f7ad200295f9dad2f091a7255a9b70ba
Files
-
4718b51e3ea07387cca50eaa64e04558f7ad200295f9dad2f091a7255a9b70ba.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE