Behavioral task
behavioral1
Sample
4c06bab08bf30b74948b150934ba54c4.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
4c06bab08bf30b74948b150934ba54c4.exe
Resource
win10v2004-20231215-en
General
-
Target
4c06bab08bf30b74948b150934ba54c4
-
Size
191KB
-
MD5
4c06bab08bf30b74948b150934ba54c4
-
SHA1
41ffabf6cb5d3b11049f7565717c7753c7e4c5ce
-
SHA256
29aad405576a34a57ae4074cc7591723a307ce9518fe82b9a9244a616b00a8d3
-
SHA512
3df6cdd7bad05f441ec018594826e0a6c55dd9cfe5db320555f33537bc23edafa46867a280fbb62c8d80757c7057438a95c213228808866f7e841c2267b9a474
-
SSDEEP
3072:sT4ENWukEhXncsgAhzKpFmDsHXRh5OxI/+1XHwTTj0PG2iTtg18AH3m+5aYsaouh:a4EU0h3yAhaMi5/6XHQQe2iTu+wIuo76
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c06bab08bf30b74948b150934ba54c4
Files
-
4c06bab08bf30b74948b150934ba54c4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE