Behavioral task
behavioral1
Sample
4f547709114908fa531c733fc2531788.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
4f547709114908fa531c733fc2531788.exe
Resource
win10v2004-20231215-en
General
-
Target
4f547709114908fa531c733fc2531788
-
Size
2.3MB
-
MD5
4f547709114908fa531c733fc2531788
-
SHA1
67ce59391a482dd69829d0faac8d145a321fd078
-
SHA256
a11c24bb2db90ee19749892266ff32eeb54a7aa3b1e096a40762b9dc148a6b2e
-
SHA512
155f0457c4aef02aff2526a8ccff68f7a1f716fbc1c3523df9f2fce81fc70bba5145554f7dc267cf782e59d0546db6398574ae6e43d2ebac3033da3184106b03
-
SSDEEP
49152:wyeTXylk2cc3WPGieB3dEcWJf3g6cb0Rm9o9EQ/4i1aGuUHR4meHw5oP89CJU2Yl:wPXyvZieBvWJ4bfC9FA5ix4m0+EY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f547709114908fa531c733fc2531788
Files
-
4f547709114908fa531c733fc2531788.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE