Behavioral task
behavioral1
Sample
4a6f551950fec9c1d76a79d8e8d2f212.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
4a6f551950fec9c1d76a79d8e8d2f212.exe
Resource
win10v2004-20231215-en
General
-
Target
4a6f551950fec9c1d76a79d8e8d2f212
-
Size
198KB
-
MD5
4a6f551950fec9c1d76a79d8e8d2f212
-
SHA1
1a8d1b1a0c1d9f097122ec7dd450fd7f3474891e
-
SHA256
716bbe5d911a7a1e1b1c5cbd3f949b592cadcf05fd46b4c85dbf0b2198634353
-
SHA512
2a22c2e4e4649d85503a0382da5b5ee260768db6f91d4d0f191900234e4e2b1ddd7b151df058e04324a37aae8893a7dff94756c7797d907a00185e14c01194e7
-
SSDEEP
3072:dLeZUwofc1zU9KUgshNIFfF7eO+blJULGaMl1+jhh+PaWY3P2lmWtoutA7U:pXw5MK1shNIFfFCULGvU+3VlBtoSA7U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a6f551950fec9c1d76a79d8e8d2f212
Files
-
4a6f551950fec9c1d76a79d8e8d2f212.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 432KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE