scan
Behavioral task
behavioral1
Sample
04de2846fede000a191a7cc8cf3e41e3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04de2846fede000a191a7cc8cf3e41e3.exe
Resource
win10v2004-20231215-en
General
-
Target
04de2846fede000a191a7cc8cf3e41e3
-
Size
16KB
-
MD5
04de2846fede000a191a7cc8cf3e41e3
-
SHA1
d8b69c0b13141b521addd810cc28acf2f78192c6
-
SHA256
e9791191777882561dac12614c7d1c3d21978dc8691d229db42313783e1011b5
-
SHA512
d5499c01d9351545528d569f075e0134ef03523befe9ce007d687a49ac6b15409d111714013fc75a6d5301b8ae3df5aa67ebf6c134218d371d5d88d8f407bc4b
-
SSDEEP
384:ZemYFqMUYNcUxuJwFOijBPXSAe9r8TnWAw32Hy4vfTCu:ARFRNcUXF7jBPCdr8zDy0eu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04de2846fede000a191a7cc8cf3e41e3
Files
-
04de2846fede000a191a7cc8cf3e41e3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE