Behavioral task
behavioral1
Sample
4eb48316d65ed70a65f927b0609abe54.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4eb48316d65ed70a65f927b0609abe54.exe
Resource
win10v2004-20231222-en
General
-
Target
4eb48316d65ed70a65f927b0609abe54
-
Size
2.6MB
-
MD5
4eb48316d65ed70a65f927b0609abe54
-
SHA1
cc18e496add96019524f4c1fb09342e01814912d
-
SHA256
a8dcc693db8fee877d7d0e24068e86925ba0d44ea0eb49a4c18730b15ff735d8
-
SHA512
60b3b6d1fff6d03a2ed0c69a91d7a9344c947884ed010ee5a94e6f37803df91481ef1feacbb18a684f34194f1e9b8cc3c09271085b299c80cf9977f3c54f064d
-
SSDEEP
24576:JzSusOjiXr30A46GGH91PmPwG/Zt4EktMC1KB/8HkZ+yTkbsPPif6HjZCF+uO3N:JTz+b30sXPgnDC1K2EQjb5l5xS/Aay3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4eb48316d65ed70a65f927b0609abe54
Files
-
4eb48316d65ed70a65f927b0609abe54.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE