Behavioral task
behavioral1
Sample
4e6217893eef95fe7f20655f65f7cf54.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e6217893eef95fe7f20655f65f7cf54.exe
Resource
win10v2004-20231215-en
General
-
Target
4e6217893eef95fe7f20655f65f7cf54
-
Size
139KB
-
MD5
4e6217893eef95fe7f20655f65f7cf54
-
SHA1
d2800990555406069b1c5d2669fe6c823ab3ed51
-
SHA256
e64868524e7acdf0853490e8f4b307760be07894c648b6999f022912bb026094
-
SHA512
eb5bd468a65523cdf39e4763ce34e59f14cd0450467390a14c7732e0af66139f021a2979dd8af51fc01376d6702996e4076e42df6bc8a9902740cb8b89d0e62a
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e6217893eef95fe7f20655f65f7cf54
Files
-
4e6217893eef95fe7f20655f65f7cf54.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE