Behavioral task
behavioral1
Sample
4f2db29285827bdd616bf782ab2613aa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f2db29285827bdd616bf782ab2613aa.exe
Resource
win10v2004-20231215-en
General
-
Target
4f2db29285827bdd616bf782ab2613aa
-
Size
9KB
-
MD5
4f2db29285827bdd616bf782ab2613aa
-
SHA1
7c468bed91960baefbf5a29ac6206998679a3975
-
SHA256
ddac8d1c4461d68d933cfcc22386d0932bc37933cdf5cb9155b5d20b49a886a1
-
SHA512
bad34d108218ed79432546a9c63aa05daa2502eb23a9b326b812e7a97c97d05c476b26a0ab0bcaa8f54b09e78219349a8d7ee929c643fe628439b3c904375f3b
-
SSDEEP
192:yuHx1dbNxCD9vZ1joLW0nuA9oGzIWWZQzKhSb86scUpR:vDFN0D9vZpMbITZQv8Rr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f2db29285827bdd616bf782ab2613aa
Files
-
4f2db29285827bdd616bf782ab2613aa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE