Behavioral task
behavioral1
Sample
4d1dd2daa2dcaacbca5210665b8d5d08.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4d1dd2daa2dcaacbca5210665b8d5d08.exe
Resource
win10v2004-20231215-en
General
-
Target
4d1dd2daa2dcaacbca5210665b8d5d08
-
Size
257KB
-
MD5
4d1dd2daa2dcaacbca5210665b8d5d08
-
SHA1
3f90f681e35cb5d3c7b02d70bdc668839f715ab7
-
SHA256
e21e24d6b240a33fe0c37234b7983fdc2b5b96a2dbef92a55f2e08f66275b101
-
SHA512
e4b62a21f3b19f2566e7b32a5a0771b9aa3f7f3f0fc3589ec9d56dcdac148cef627569c216e8f46acc1b5612f0635e79278146f527fa4460fb389cfb33c778db
-
SSDEEP
6144:aJjs0RyTYNKaAqbMCoyfSKT8Fs5BPryBQc9ldMCTPSJ4:aJw0RyUKju/7fSDFOryGuldMiSq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d1dd2daa2dcaacbca5210665b8d5d08
Files
-
4d1dd2daa2dcaacbca5210665b8d5d08.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 250KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE