Behavioral task
behavioral1
Sample
04e40b3391cc72697c364832c31a6cc2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04e40b3391cc72697c364832c31a6cc2.exe
Resource
win10v2004-20231222-en
General
-
Target
04e40b3391cc72697c364832c31a6cc2
-
Size
91KB
-
MD5
04e40b3391cc72697c364832c31a6cc2
-
SHA1
3dd3cb360243790b042d3072798d572adaefb008
-
SHA256
d47416a5e5986d54fa9fe42a6b20da8974485ced674b99c43509ed689af27add
-
SHA512
ccd14c72ccb0d514b11b3366f5eee5cac788be22278c5f05ccb5a7b68ede0836ac3e1a9e00bed59a6ef1224fdaaad5a1a475f451745b7ddfcdbd7b56d7072fdd
-
SSDEEP
1536:uJ8wUqzSqxl1a7dJ8ijpX9J2ltMeXe/WShTeDSJ4dz2ibAEchLIC6ldRl7fu2U:QnUqzZi3XmtMeSWfOkzhBlCKz7m2U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04e40b3391cc72697c364832c31a6cc2
Files
-
04e40b3391cc72697c364832c31a6cc2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 292KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE