Behavioral task
behavioral1
Sample
4acc7ab137684d69e4d02706116e52a8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4acc7ab137684d69e4d02706116e52a8.exe
Resource
win10v2004-20231215-en
General
-
Target
4acc7ab137684d69e4d02706116e52a8
-
Size
367KB
-
MD5
4acc7ab137684d69e4d02706116e52a8
-
SHA1
c1c0021b152189cb57106c36bedbb40026a201bd
-
SHA256
655a8a399bcc6610b78021045f8b49ba86333cc58bdc729fe932eee20136a796
-
SHA512
867f70552dbae10b45e9770d65125de95bfe364631cf2913c45c018a8ed8b12fff1525a992fa5e4fb07f6bbb8b8fbc162d3e93459f7f9b80e62c9fdf9b85f294
-
SSDEEP
6144:RXwATCOjf5ns6qBnf4Yj1cMeHzI7AwUXrQuGzoSTJAXjiU4bz:xpRBnSRj1LeTI6lGzoSTJAX+U4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4acc7ab137684d69e4d02706116e52a8
Files
-
4acc7ab137684d69e4d02706116e52a8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 297KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE