Behavioral task
behavioral1
Sample
4ab8fe1e78032e7e21bfc7f9ffb4dac1.exe
Resource
win7-20231129-en
General
-
Target
4ab8fe1e78032e7e21bfc7f9ffb4dac1
-
Size
402KB
-
MD5
4ab8fe1e78032e7e21bfc7f9ffb4dac1
-
SHA1
81234a22190d834c6959d3e4164f2d359ebce34e
-
SHA256
79e3ec6c521fd939a66b44cd02e87772412cf065f8a247a0da5856df54b3efed
-
SHA512
8ce68c92f29d26d1b85dbbc9b2690c7f04e4193683c5aeee89976e7a44254a235f9ad2c0531e4bb9a575334b08eaf9312cfb4ecb2b7b3061d7636cb2513c197b
-
SSDEEP
6144:hmaKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgU:mSmLAuEY71fviagATFmebVQDcYcg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ab8fe1e78032e7e21bfc7f9ffb4dac1
Files
-
4ab8fe1e78032e7e21bfc7f9ffb4dac1.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.heowr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE