Behavioral task
behavioral1
Sample
04f7448a7c2634da21da893a40dc3350.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04f7448a7c2634da21da893a40dc3350.exe
Resource
win10v2004-20231215-en
General
-
Target
04f7448a7c2634da21da893a40dc3350
-
Size
5.1MB
-
MD5
04f7448a7c2634da21da893a40dc3350
-
SHA1
7cea75674620e6740a8e424e65207915cc45db20
-
SHA256
2a440dcdfa33ff1eb0c2d9847d9d6421be12480373dc0a8697117148b0ad21a3
-
SHA512
4e7774f167c61c5090e126fb52b176e77f1e26d5cef6d1b33cd13772e895e57a1f711f7427c632904f28038597752e863cce5262cf315a4f42713dee458c607f
-
SSDEEP
49152:6NqtPR9fvWTb8LIKrrUAOCu1sOombLAlHtLRH5/O7QllFay35bkrfg8FYri+ts5W:6UHx0Yrwv1om6Hr930g2yOEjjs9/g3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04f7448a7c2634da21da893a40dc3350
Files
-
04f7448a7c2634da21da893a40dc3350.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE