Behavioral task
behavioral1
Sample
4286f7bda9715f72c9e59972cc2a933c.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
4286f7bda9715f72c9e59972cc2a933c.exe
Resource
win10v2004-20231215-en
General
-
Target
4286f7bda9715f72c9e59972cc2a933c
-
Size
75KB
-
MD5
4286f7bda9715f72c9e59972cc2a933c
-
SHA1
f53466192ea78b6fdcbf6d7ffd57603583169238
-
SHA256
71dbbcdbeb1f81bf2d925124ff18eb4de76583d64033148417ccec6646df7660
-
SHA512
884c7ff0eed4a2f86a824dcac2d178488439ae817c88ffc6aa99b916e2cd973c97e8d659fc25186e2df4aaa51100a856342c5327d087d8f00d64cc56150950dc
-
SSDEEP
1536:h87wc1aGNC0klI7CPpIFa60ag/PGEvaj7GbspUpQQ0bCmv3:m7wc1aOCo7CxIIxOEviGwD2m/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4286f7bda9715f72c9e59972cc2a933c
Files
-
4286f7bda9715f72c9e59972cc2a933c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE