Behavioral task
behavioral1
Sample
4863663e5d6bed06004b9d3cd902c900.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4863663e5d6bed06004b9d3cd902c900.exe
Resource
win10v2004-20231215-en
General
-
Target
4863663e5d6bed06004b9d3cd902c900
-
Size
61KB
-
MD5
4863663e5d6bed06004b9d3cd902c900
-
SHA1
87b9def08e9a06ed22e3c9104ee16404ccd99060
-
SHA256
e68827cc95cd98f2eec11eb0793d1c1e90b37d47e68e263527776396bbccae31
-
SHA512
cae03ebc557054f945cd5417499613738c33d66c84bb949155e2ae362a483625cdef1b140668594b30207ca7891ee2877eff297ddf7b319827e5a36f3abfbcba
-
SSDEEP
1536:/Sam8PvCyaQCCUvvnCXmmfvLMmW5F3TIvwH7pnK:nrvaQCvKtngm4F35lK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4863663e5d6bed06004b9d3cd902c900
Files
-
4863663e5d6bed06004b9d3cd902c900.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yC Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE