Behavioral task
behavioral1
Sample
4fe3fe9715a084ce2badf10b7532f9ad4bc8e343cd48fbe344c125ac2c5bf786.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4fe3fe9715a084ce2badf10b7532f9ad4bc8e343cd48fbe344c125ac2c5bf786.exe
Resource
win10v2004-20231215-en
General
-
Target
4fe3fe9715a084ce2badf10b7532f9ad4bc8e343cd48fbe344c125ac2c5bf786
-
Size
315KB
-
MD5
9a0bda74910b19349f38b9feeab5a1ed
-
SHA1
999bc189e31251f254e3a030a67e1d0f2cd973aa
-
SHA256
4fe3fe9715a084ce2badf10b7532f9ad4bc8e343cd48fbe344c125ac2c5bf786
-
SHA512
cecd682fa805cd69a1715f2b1d3bf180deda2f2465e8afcb98d59948a20e567f7587f5b96fdd62f0cf294ffaef0259aba5646fd5656dd8a2f7a9c8424c356cb2
-
SSDEEP
6144:zIJmHfIWto0UPMwIPzlcaJOTR3cJC5bMEptnPtJ+r2hqbwYSZDMIL5YoS:zIJmHfIy4PbuON3cgWEptPxiwYSxooS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fe3fe9715a084ce2badf10b7532f9ad4bc8e343cd48fbe344c125ac2c5bf786
Files
-
4fe3fe9715a084ce2badf10b7532f9ad4bc8e343cd48fbe344c125ac2c5bf786.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 716KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 295KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE