Behavioral task
behavioral1
Sample
4e049c907b00e47da16a0c83ef4d53b2e4a03f208cb800cb7f7c962ddd90abc5.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4e049c907b00e47da16a0c83ef4d53b2e4a03f208cb800cb7f7c962ddd90abc5.exe
Resource
win10v2004-20230831-en
General
-
Target
4e049c907b00e47da16a0c83ef4d53b2e4a03f208cb800cb7f7c962ddd90abc5
-
Size
378KB
-
MD5
8500080f94ad92a2d0c0e030f4f37dca
-
SHA1
7d6dfb06e5aae8030628c36f42e3c1d9c85d86d7
-
SHA256
4e049c907b00e47da16a0c83ef4d53b2e4a03f208cb800cb7f7c962ddd90abc5
-
SHA512
3b0ba90c0054700966329333881f85768315c1b94ab1be218616704fc15c81b7f07de24e8670b3dbb4f394da479a9ebae8e05555d38e04aeb0b9f9321e450488
-
SSDEEP
6144:HPqSdLithTOPxNiq5dfOaSq93pW5fMQb+vcOcLiwx52MMAy93m49M3Qk4YjoSeb:HizthqZNJbfO7U3pW5kQbJl3Fy93mVQe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e049c907b00e47da16a0c83ef4d53b2e4a03f208cb800cb7f7c962ddd90abc5
Files
-
4e049c907b00e47da16a0c83ef4d53b2e4a03f208cb800cb7f7c962ddd90abc5.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 752KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 355KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE