Behavioral task
behavioral1
Sample
4a6ddd26ec41528a5a78b60faa283341.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a6ddd26ec41528a5a78b60faa283341.exe
Resource
win10v2004-20231215-en
General
-
Target
4a6ddd26ec41528a5a78b60faa283341
-
Size
239KB
-
MD5
4a6ddd26ec41528a5a78b60faa283341
-
SHA1
3ca372f826335e0021b6755c2630b36683ec8454
-
SHA256
e0ad848c1a15fc4d952aee0ecec1df027aa18ffc6d5051c4bad6427f1d4486ab
-
SHA512
1414f0a8b5373be1e28061f9aa07cc2318b68416b18d86a4c63a7f75a0d179d362481ec580fa872e0370d15ea9724b319f34cdfadce5ea396128e6ea1e54379d
-
SSDEEP
6144:4zbEJxjpqfs82zTQ4zmG1bS+GRBaa75EC1ehFb:EgJx9qEtzTpzmmS+GRcA5ECoFb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a6ddd26ec41528a5a78b60faa283341
Files
-
4a6ddd26ec41528a5a78b60faa283341.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 445KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE