Behavioral task
behavioral1
Sample
4f53d5a3bcb4fb42f25f538d4d672c2c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f53d5a3bcb4fb42f25f538d4d672c2c.exe
Resource
win10v2004-20231222-en
General
-
Target
4f53d5a3bcb4fb42f25f538d4d672c2c
-
Size
132KB
-
MD5
4f53d5a3bcb4fb42f25f538d4d672c2c
-
SHA1
d5424bfd4b856128dcfc5b76595971589866be8a
-
SHA256
ddeb7d0fa15d81bebe1a838d9bc4774cdb02e7270fe4696630f016d11a3d11fa
-
SHA512
eb4ac8bbf3732f8816c43b66d92b64a3a933779f2b8c8c2d3627f02fc4b9e2365e75b7aeee87b76ee43709c1c9bacd02e3ec28b8faa032d1527af20732b0f6fd
-
SSDEEP
3072:QxaVZhV/6VatDXIj/WtWpW30yAldySoV829houtgBiyN:QcX6VaSIRAldxoV82DoSgBi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f53d5a3bcb4fb42f25f538d4d672c2c
Files
-
4f53d5a3bcb4fb42f25f538d4d672c2c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE