Behavioral task
behavioral1
Sample
4634d31f077060193728ff28080a52e8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4634d31f077060193728ff28080a52e8.exe
Resource
win10v2004-20231222-en
General
-
Target
4634d31f077060193728ff28080a52e8
-
Size
122KB
-
MD5
4634d31f077060193728ff28080a52e8
-
SHA1
0d17fc78cebce94d5bdb430918a9de4d437ac70c
-
SHA256
f950d0af9564f3d12110294d49a010c0b2808c34f5f6ad9f84fa0c2afd752c1d
-
SHA512
661895efaa3ade5ab8dc56928d2fe65b8970601dc0bcd23e11953c42331ead5c8577980dc2dbeb64276b48026ad2a3367a62f404dbe1554eb78c5429ffefe2a4
-
SSDEEP
3072:27l+k3JbhuFr7IxThw2u6m1KnEqfdzaQQIhhpju4Bs97uwMxh:hk5tuF4dh66mKlVmbIhtBsuwMxh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4634d31f077060193728ff28080a52e8
Files
-
4634d31f077060193728ff28080a52e8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 785KB - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE