Behavioral task
behavioral1
Sample
fea633c3ec612d405866d4ca86b68bd17f827f0cf62c9e8343f90ce2fcdd2b20.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fea633c3ec612d405866d4ca86b68bd17f827f0cf62c9e8343f90ce2fcdd2b20.exe
Resource
win10v2004-20230915-en
General
-
Target
fea633c3ec612d405866d4ca86b68bd17f827f0cf62c9e8343f90ce2fcdd2b20
-
Size
4.8MB
-
MD5
472f051f0e4df9c179c9ca5b0783ad75
-
SHA1
c39b0485b06f0ec99b5e43ba04b1bb2f808edafd
-
SHA256
fea633c3ec612d405866d4ca86b68bd17f827f0cf62c9e8343f90ce2fcdd2b20
-
SHA512
a4fb7ad97687b7e9ee2c0756169ac1cc83910d0bae6868b63c05168d58a26fc4cec4421134a9bc7850cc5122dbe4cf069ad2e5f7ab8396058501bc16bec82994
-
SSDEEP
98304:X5PbaYayaxmoWzWfW5XRbU+b0xbUV1yM31yAnP7NTxJj7Ld:X5PbpayLPzWaZU+4xk1yM3JZjLd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fea633c3ec612d405866d4ca86b68bd17f827f0cf62c9e8343f90ce2fcdd2b20
Files
-
fea633c3ec612d405866d4ca86b68bd17f827f0cf62c9e8343f90ce2fcdd2b20.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.UPX1 Size: 512B - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE