Behavioral task
behavioral1
Sample
4b9ff2822ba14959698c6c9ff9eb3450.exe
Resource
win7-20231215-en
General
-
Target
4b9ff2822ba14959698c6c9ff9eb3450
-
Size
388KB
-
MD5
4b9ff2822ba14959698c6c9ff9eb3450
-
SHA1
4ce57fa64ca76cb111c7273ef4ca3c8b67558fff
-
SHA256
75cedd3a0ed6d4abd9ec56eefc59a441f59b2c1860a700012947300e880f60d7
-
SHA512
689e832a2754cd9b4acd6f3e54ad3272d4e7cfd43cda8ab626ad85d699d8047d9f2d3736303804d4b5f6d78fa68a5e02b2665486584a115fc0ad9e2298cebcbc
-
SSDEEP
6144:X805yHbwOUo6RwLfurlHiIsmyh5yCuCak3vSGo4cFpdc/eekNpoSHzeeD:M05OyrfRHiXhquv7Ypdc/eeqpoSTeeD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b9ff2822ba14959698c6c9ff9eb3450
Files
-
4b9ff2822ba14959698c6c9ff9eb3450.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 956KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE