Behavioral task
behavioral1
Sample
04bea6ddcf4be92f579251217341d936.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04bea6ddcf4be92f579251217341d936.exe
Resource
win10v2004-20231222-en
General
-
Target
04bea6ddcf4be92f579251217341d936
-
Size
1.3MB
-
MD5
04bea6ddcf4be92f579251217341d936
-
SHA1
4e43c6294c11a88aaaa6e82f6b3b42bfb25b5184
-
SHA256
74f808b29d7687f6ad7e508b83f79443fcf62cb92861e840c30b85050e2d208f
-
SHA512
1843217662d547802805da454f039032201fdbd2cd2233d32bda55a7ffeb57560dc9095fa7360c533f7e44c6b4c2a7f88a0dbf8bba3008825a23f41163cf3183
-
SSDEEP
24576:6QAZvQVOlgz5VPR7c1gAlgGpya0vco56XiYLNJoOre4CqqJgytBU9/9Us:6QAJllYPR4w+i5W+O0aytCR9j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04bea6ddcf4be92f579251217341d936
Files
-
04bea6ddcf4be92f579251217341d936.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE