Behavioral task
behavioral1
Sample
4d17284d08dc9fe8d36f1ea7d3ef784d.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
4d17284d08dc9fe8d36f1ea7d3ef784d.exe
Resource
win10v2004-20231215-en
General
-
Target
4d17284d08dc9fe8d36f1ea7d3ef784d
-
Size
139KB
-
MD5
4d17284d08dc9fe8d36f1ea7d3ef784d
-
SHA1
66756ecd58d45473f68fd7f13e12f19a0eeda036
-
SHA256
2d3c643b2727b15c8480a46d9253f7fcdac73d9848af016f54861ed0979e4123
-
SHA512
41fbc006ccc68449ace6d5013784eec0f8173c9cb507ed1c04fe05f2026e1855b5e8f68a29b4dddf13377a7ca4b8f8d130c79423254241db5f7737639099447c
-
SSDEEP
1536:N9PjUa6cNeHtRkWgd+K9FQcMIsksVtdabwjZ1ksAszPoLq:bPjUyNe9a+G9dsksVzabwbksh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d17284d08dc9fe8d36f1ea7d3ef784d
Files
-
4d17284d08dc9fe8d36f1ea7d3ef784d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE