Behavioral task
behavioral1
Sample
4d8eda03ff9e296aac71e1d737d2eab8.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
4d8eda03ff9e296aac71e1d737d2eab8.exe
Resource
win10v2004-20231215-en
General
-
Target
4d8eda03ff9e296aac71e1d737d2eab8
-
Size
2.0MB
-
MD5
4d8eda03ff9e296aac71e1d737d2eab8
-
SHA1
9a9b145664e2e9cc30dcd4db900f66cae4b641d1
-
SHA256
81119270ed53a19c342af1a13339dadb8d1c342f59dc38f59d83006d2024891d
-
SHA512
6ed0b8b0d6c4d7b7b6d9f7c028964a60213b3c10b66b744fd8d57e2a04460dfaaf05ee449bc05611bd4c8a020810d17951d807ada222fa8dd2fdecf3bdaf2385
-
SSDEEP
49152:stwlVZU/L0QS8tbUTg2OaROgXwPCIEKynfv6rE5BcfOsVeUTg2OaROgXwPCI:stwljU/L0QS8tbUTg2OaROOw9EvnUE59
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d8eda03ff9e296aac71e1d737d2eab8
Files
-
4d8eda03ff9e296aac71e1d737d2eab8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE