Behavioral task
behavioral1
Sample
4306463cf3c5a43d3d04a093dc390fe2.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
4306463cf3c5a43d3d04a093dc390fe2.exe
Resource
win10v2004-20231201-en
General
-
Target
4306463cf3c5a43d3d04a093dc390fe2
-
Size
266KB
-
MD5
4306463cf3c5a43d3d04a093dc390fe2
-
SHA1
9d23119585ce0d20439812c0b3c99e5ce82549b5
-
SHA256
4045dcebe5707fce9c3055983c0909c0ac99bdc86f3c471f01cb4a30141ad89b
-
SHA512
9dff1fd236d45c47f7f33245e57e7cf33b9f08a84cb64505c7c19e3906d0099686dfb6e507bedf2492094e1095b22319cb204d4a94655114aded0c1930203816
-
SSDEEP
6144:j5AFcjOxOCgL1s5BM2k/zLUOvApkYMRbrfZF2TcNq7ttDj1QGbnKK4MQ:j5YIOxOCgL1oBMZ/zL3fTKtbj6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4306463cf3c5a43d3d04a093dc390fe2
Files
-
4306463cf3c5a43d3d04a093dc390fe2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE