Behavioral task
behavioral1
Sample
4985d0ee9e78d826ef99cafbc4d44320.exe
Resource
win7-20231215-en
General
-
Target
4985d0ee9e78d826ef99cafbc4d44320
-
Size
212KB
-
MD5
4985d0ee9e78d826ef99cafbc4d44320
-
SHA1
3ccfaf5056c55b546be457bdcf60e8e7cc69fea1
-
SHA256
d139cd8ab8c8f7d6aac4b0c015fbdcae25687c7ae79c7305fca34166f42850e2
-
SHA512
1de6238e46597f5917eee609268895ab51f462c5eb7193734b1db5ac1c5f31a7c60b936e0fed48bbc4b95726a5079223b2b4f46f611e084e90439408575496b9
-
SSDEEP
3072:fJacj8v7wQ+ZGx7w8wjjP8I1IU8RjrzzvUWAOZjfKdLnYP:fJPgv7wJZ87wBjYI1IUwrIOZyYP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4985d0ee9e78d826ef99cafbc4d44320
Files
-
4985d0ee9e78d826ef99cafbc4d44320.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE