Behavioral task
behavioral1
Sample
4574d9ed1b08ece5f86ca0758798b3aa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4574d9ed1b08ece5f86ca0758798b3aa.exe
Resource
win10v2004-20231215-en
General
-
Target
4574d9ed1b08ece5f86ca0758798b3aa
-
Size
132KB
-
MD5
4574d9ed1b08ece5f86ca0758798b3aa
-
SHA1
b89308faac9acc6febfcbcf39a57b0fe4bb9c28d
-
SHA256
c25bda3e59c4d32ce8c238a7c4d0c31853a1ec34bef8e475b0bf62353ecab518
-
SHA512
0e198096704e9449ab69ab0b375afe7c5b988ce395086403c9e5db7df24d763b99f98b90a0d79f933487f5a6840a6d9fc946284ceb013ffb8f3aaee195049548
-
SSDEEP
1536:1d4VFS0cCFmD/weUfGvfKXFASMg92Hm2geF0E8oTtKIGAt/oPmB30:X4VRcsiU+32MgKZgeSEVuM/o+J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4574d9ed1b08ece5f86ca0758798b3aa
Files
-
4574d9ed1b08ece5f86ca0758798b3aa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ