Behavioral task
behavioral1
Sample
4b1a76be51d40026be710886cb55aed8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4b1a76be51d40026be710886cb55aed8.exe
Resource
win10v2004-20231201-en
General
-
Target
4b1a76be51d40026be710886cb55aed8
-
Size
784KB
-
MD5
4b1a76be51d40026be710886cb55aed8
-
SHA1
9ac2a67c0f9d5bd09a576649a5e19f008092f22a
-
SHA256
0e9e66e866f9c133dda4375b38389a5c4b91badb553ee2fb94cc6cc1972e0296
-
SHA512
8002ac287284ad2b0a14185a7b5ba26c6adf614201a2d217768ee3c60af560a87c483525416951bc802e6b3d7f37bc49e2e49b9010437d6040a3d7f5178a8148
-
SSDEEP
24576:3Mc66uYjBf57jAymRW17Vcp7A+X3H6klR3:3Mv6uYVRQl6kl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b1a76be51d40026be710886cb55aed8
Files
-
4b1a76be51d40026be710886cb55aed8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE