Behavioral task
behavioral1
Sample
4e593a06e3e2ece098b59b238882f25e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e593a06e3e2ece098b59b238882f25e.exe
Resource
win10v2004-20231215-en
General
-
Target
4e593a06e3e2ece098b59b238882f25e
-
Size
146KB
-
MD5
4e593a06e3e2ece098b59b238882f25e
-
SHA1
c4880b490dab5723c42db0fb9a5819d7ad82f07b
-
SHA256
e0cea4ed3c247de8a1e2716ff1983aea7ef8a220b45236ff4afdb403dea2d123
-
SHA512
9ecb1db0dc9edd421d96ca01dea8c629f2ecce9488aaa7fab0b9d13943a306fc6d1f9ef900eb536571fd2b9e53babc83e652bbcb67e760cdf5d3af310034011b
-
SSDEEP
1536:xWMVRbZ56mt4JH+aQOR5DX1Q3e6hbk3wqUFwt2KLaUSJVAxrhUpyXw2nXv3cswoz:TDdtnGx+3ePywgsEJVqhU4LXvsn3u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e593a06e3e2ece098b59b238882f25e
Files
-
4e593a06e3e2ece098b59b238882f25e.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gvyhrvo Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE