Behavioral task
behavioral1
Sample
4cb37b7a06699d0503c86c94e5cf365b45a5b72aaa2bb242fd1bd4582a21e50f.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4cb37b7a06699d0503c86c94e5cf365b45a5b72aaa2bb242fd1bd4582a21e50f.exe
Resource
win10v2004-20230703-en
General
-
Target
4cb37b7a06699d0503c86c94e5cf365b45a5b72aaa2bb242fd1bd4582a21e50f
-
Size
315KB
-
MD5
e082f40bb1286e5c064826bd314eb9b7
-
SHA1
1c0293ed1c9cd3ad65f01a282a8a388dcce760e8
-
SHA256
4cb37b7a06699d0503c86c94e5cf365b45a5b72aaa2bb242fd1bd4582a21e50f
-
SHA512
b5733a949ea44d5702bdf4fb019615c408ca70d52cdaa00695eddb4f410ccaa1aae821eca9ac5f6c08c5c91532b1a1afe35ac56a6e59250efebd8507da2ec122
-
SSDEEP
3072:hnr3nXkzlrkYx+6BNdZK87VY62mLPib+:4rkYx3BzZW62Xb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cb37b7a06699d0503c86c94e5cf365b45a5b72aaa2bb242fd1bd4582a21e50f
Files
-
4cb37b7a06699d0503c86c94e5cf365b45a5b72aaa2bb242fd1bd4582a21e50f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 740KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 311KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE