Behavioral task
behavioral1
Sample
4aa612a76311b9950276b6666591f269.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4aa612a76311b9950276b6666591f269.exe
Resource
win10v2004-20231215-en
General
-
Target
4aa612a76311b9950276b6666591f269
-
Size
204KB
-
MD5
4aa612a76311b9950276b6666591f269
-
SHA1
117fd3e32499a7728b5f0e96052ce33b2534ef3d
-
SHA256
33aec5ba0d096f6ca5290cc69df928f84b90f1a57e57c8327c215a7aff9e437d
-
SHA512
1fe54fcf18794ffee3654131bc84981cf9bb14a878613397d2b3008b8a7f4fea1b8a71849587dea0eb9381e85fca002bc5cfd78c6f4edf8272cdc92860295c97
-
SSDEEP
6144:jsDxB60n6x8LGV7xBuXN5mx+BLIEw9/H4DTXLE:j+gedQ+dIT/Mc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4aa612a76311b9950276b6666591f269
Files
-
4aa612a76311b9950276b6666591f269.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE