Behavioral task
behavioral1
Sample
4ce3d0fa0e856e8621e2bca9a266f192.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4ce3d0fa0e856e8621e2bca9a266f192.exe
Resource
win10v2004-20231222-en
General
-
Target
4ce3d0fa0e856e8621e2bca9a266f192
-
Size
24KB
-
MD5
4ce3d0fa0e856e8621e2bca9a266f192
-
SHA1
84cfd3e24bb6ac626f836258d2bd9a0c1111a505
-
SHA256
326c70a2bd12fa30a8440d76692935f00ea6086a4a21e8fa9ef20568bd841b9a
-
SHA512
6d91c1463862e4aa48f86181b04b1840c7badf6c83dfa54d698d53a9f30179abc7496e3dbda45205861bf835046909a7a5fac0a97e75c96ce5b746841f83f1dc
-
SSDEEP
384:Mr9sOcIp6wRcsSYLvKWLWbstQTid6HJyraXkqdkJ7PNWoubW+HsaNJawcudoD7UT:gmOhplcsHvKWzX6HJmFqda7koSlnbcuM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ce3d0fa0e856e8621e2bca9a266f192
Files
-
4ce3d0fa0e856e8621e2bca9a266f192.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE