Behavioral task
behavioral1
Sample
f4c6aed5aed4da1129e27f96dc1c9443.exe
Resource
win7-20231129-en
General
-
Target
f4c6aed5aed4da1129e27f96dc1c9443
-
Size
2.3MB
-
MD5
f4c6aed5aed4da1129e27f96dc1c9443
-
SHA1
df0dbbb505b664abc497526db72fb1e9149a0734
-
SHA256
60384871e1a3568610f8165ca851856d9a28b3326350536268f15731f4713e4b
-
SHA512
a04f2de205d3376910ea701ea92afc6fe4ff2f289c0071362f593201eb0059aad4eb1b29866302024e929a232358b799aad829d0a8ebbed8ed3e2a2baf6d0d04
-
SSDEEP
49152:I3rVyDrP8axesEEDuGP64OFZ4jIzyR/UUkKUO4dLrvac/7:I35yD78a1RaGP64OPH5KodLryc/7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4c6aed5aed4da1129e27f96dc1c9443
Files
-
f4c6aed5aed4da1129e27f96dc1c9443.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE