Behavioral task
behavioral1
Sample
4efa7f929f7c57248e7f6b8eda7faba7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4efa7f929f7c57248e7f6b8eda7faba7.exe
Resource
win10v2004-20231215-en
General
-
Target
4efa7f929f7c57248e7f6b8eda7faba7
-
Size
862KB
-
MD5
4efa7f929f7c57248e7f6b8eda7faba7
-
SHA1
c80b4c06a128d698d406905788c0076ae127334a
-
SHA256
dd06c67bae688b0ae2e9864014af4dbac96c137e44d2f057e8539d79b9659ec1
-
SHA512
c0db568f6e053fd574ed2a64b90ed5f97608f5375883602f621a5f36f9c64ebf430b30e27eba13cb5c5e74ceb8a509604be901ce4f7e36096c3b86e629db4ac1
-
SSDEEP
24576:ju5Z+hBceIfmi9BARr+xTVouQd3mseJxeC8C:phOeJi9BARCHQd3MJxeY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4efa7f929f7c57248e7f6b8eda7faba7
Files
-
4efa7f929f7c57248e7f6b8eda7faba7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 812KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 852KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE