Behavioral task
behavioral1
Sample
4e5d2b140d041a7471f182fb2018ef5d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e5d2b140d041a7471f182fb2018ef5d.exe
Resource
win10v2004-20231215-en
General
-
Target
4e5d2b140d041a7471f182fb2018ef5d
-
Size
353KB
-
MD5
4e5d2b140d041a7471f182fb2018ef5d
-
SHA1
a86b04717a263a2ed52055811ef00ee860096d41
-
SHA256
4dc3a1281cc3f8f7b483b98c7a6b8ec32208e67c0043a458fdaf2aab76066508
-
SHA512
1b2cef64d6e202e6a3f15a42562581deda1f8b397c87b7fe0f402d9d0693a09d8dde694b4bf62934402685e9704f502fddf1474db25c564ca56aafeb703b441b
-
SSDEEP
6144:pMryeTUITvsChDtTtr7NI3HSMaXxAAiVbFk7OjqZIT5cAYdxfsLPrPwo+:uryeTUskCNtBrRMcA7VbJMI1fYTfmE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e5d2b140d041a7471f182fb2018ef5d
Files
-
4e5d2b140d041a7471f182fb2018ef5d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE