Behavioral task
behavioral1
Sample
4f6b9162e48da6b6052a4993b757d7ba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f6b9162e48da6b6052a4993b757d7ba.exe
Resource
win10v2004-20231215-en
General
-
Target
4f6b9162e48da6b6052a4993b757d7ba
-
Size
414KB
-
MD5
4f6b9162e48da6b6052a4993b757d7ba
-
SHA1
1e6781d401182b4cb25b92087812e2e5e0e69258
-
SHA256
4ea1fb1c87cf915f03b7a56e495336086ce1f1fdd282889e67f8812bff9e2098
-
SHA512
5551c090f8c6dbb0fa3267801dbee203cf1b27c7c871a75d7fc9d2a426949cf13321f097b484650bc494661e3240aad37999662486f22262c2dce01938ecabc0
-
SSDEEP
6144:Oz0gHtONUzEq199c9yiY2TrAJ8DjqYvjtesubtwL5LXJBXTXM7Nw8vCXIZEFSp:OwgHrY2991urAIxrLu+VLXJBD+qiMc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f6b9162e48da6b6052a4993b757d7ba
Files
-
4f6b9162e48da6b6052a4993b757d7ba.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 7.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 537KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE