Behavioral task
behavioral1
Sample
4ea273e0a410218ddd0cfc24e9a85fc4caeae70fa8c60501a889757da46aa1df.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
4ea273e0a410218ddd0cfc24e9a85fc4caeae70fa8c60501a889757da46aa1df.exe
Resource
win10v2004-20231201-en
General
-
Target
4ea273e0a410218ddd0cfc24e9a85fc4caeae70fa8c60501a889757da46aa1df
-
Size
2.0MB
-
MD5
199e017de6c29eb6604dd76a1c4f862f
-
SHA1
a906c4b7272dabf83a783312b3a9e3fb1953f522
-
SHA256
4ea273e0a410218ddd0cfc24e9a85fc4caeae70fa8c60501a889757da46aa1df
-
SHA512
634ad864ddaf572fef5502cc90f7d8f3b60d78a768c26c08195254d6148edaf62165268ffb1055e427206d6fca539f99e52e4b26b4bdd5abd3f15f77b42d3bee
-
SSDEEP
24576:TU50d4e4WyOkx2LFXqHjSow15JbKkKF/eMNPj5:TUs4XWEQpqHjStT9KFeMb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ea273e0a410218ddd0cfc24e9a85fc4caeae70fa8c60501a889757da46aa1df
Files
-
4ea273e0a410218ddd0cfc24e9a85fc4caeae70fa8c60501a889757da46aa1df.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE