Behavioral task
behavioral1
Sample
4a69a5aaec05604e43612f025a3137dc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a69a5aaec05604e43612f025a3137dc.exe
Resource
win10v2004-20231215-en
General
-
Target
4a69a5aaec05604e43612f025a3137dc
-
Size
218KB
-
MD5
4a69a5aaec05604e43612f025a3137dc
-
SHA1
2a42aaf1ec649d882f8faa7018b0a996616d11ca
-
SHA256
5a39b90268e60068ab104fca228b90ae9ca8b13a3778cbf86c2aa1131d83b66e
-
SHA512
d457ecb47105820c09aefd8a7229a1ba9944cbc46b6af1c95f89ef6e1c929a1c2a459dbae31d03b19cd171eb208b6e1ea291702a024c0aebcd030b1d3bf5c93f
-
SSDEEP
3072:ZqBRz55UAYxUsa/7EUp84NHNtGdVKS3l:ZqBn5UAYxebcX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a69a5aaec05604e43612f025a3137dc
Files
-
4a69a5aaec05604e43612f025a3137dc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE