Behavioral task
behavioral1
Sample
4731e88b7ab8cbb2e331238179d1baab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4731e88b7ab8cbb2e331238179d1baab.exe
Resource
win10v2004-20231215-en
General
-
Target
4731e88b7ab8cbb2e331238179d1baab
-
Size
222KB
-
MD5
4731e88b7ab8cbb2e331238179d1baab
-
SHA1
3b3c8f54a126a13a2e62eed9f524d49d636fdf8e
-
SHA256
29fe1596c2ceb90a3683478f137edc3c54e15500b301593787c42b9f6ab42e41
-
SHA512
5449e46f913f3ce80740279969e91fee7f6cc3b61d80eab50b6165ac18c6733fb4a76731c79b75c02257234e7595111f9c97d16d04e29375a725a7c1f69469c3
-
SSDEEP
6144:ATR3YyQJdnjU/Xk9thVC6hjBmTo8Xo4wtQXzs:Al3Yk/Xl6nmJ3EQXzs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4731e88b7ab8cbb2e331238179d1baab
Files
-
4731e88b7ab8cbb2e331238179d1baab.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 185KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE