Behavioral task
behavioral1
Sample
4efbf5c64d3e795d71a0e648305d7aba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4efbf5c64d3e795d71a0e648305d7aba.exe
Resource
win10v2004-20231215-en
General
-
Target
4efbf5c64d3e795d71a0e648305d7aba
-
Size
784KB
-
MD5
4efbf5c64d3e795d71a0e648305d7aba
-
SHA1
d63a6c41899813c9989117ea801e31407ecf2dde
-
SHA256
557a2b0fe08f29a0681c7512751b19cf1b00942cf66b5e00466a646c1492e2ee
-
SHA512
bf765a568da1d9f1b05dc9fc0b4a94546fe2054d95585b4eb8b4518f77c86b018d5789b05b2fb1ea579760d2c712e41ce2e461446af625d224f17641b50efb77
-
SSDEEP
24576:vfdPi4n4L+od0KJn+Lg87sw8FcxbR2SWQ6+I/:vfk4ni+owLg87hxbogm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4efbf5c64d3e795d71a0e648305d7aba
Files
-
4efbf5c64d3e795d71a0e648305d7aba.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE