Behavioral task
behavioral1
Sample
c4b18b589ed59c016cc6faa44131fa8a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c4b18b589ed59c016cc6faa44131fa8a.exe
Resource
win10v2004-20231215-en
General
-
Target
c4b18b589ed59c016cc6faa44131fa8a
-
Size
1.6MB
-
MD5
c4b18b589ed59c016cc6faa44131fa8a
-
SHA1
cad0a3d603d0cc2a9b6e60ade76094b2991a29a1
-
SHA256
0efd85e9ac9e6eff5d739838a1fec6c37587684c7a0189d50bd5353155429686
-
SHA512
c30227e4c357665fc2957269937f69b3aa72df570082a362bc9ee14a3974bf86c422d4814f60047c597fd55248c60b8110c1eb36e7c1886f6c54f3049d9eba49
-
SSDEEP
49152:nyk6ZOctreHcRWcakLz0pXmuyyu6Ce0LcNQe0mcakLz0O:nF6dtqHcRWcakcouU69kmQe0mcakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4b18b589ed59c016cc6faa44131fa8a
Files
-
c4b18b589ed59c016cc6faa44131fa8a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE