Behavioral task
behavioral1
Sample
004c579e7dc3072db6f77bacd0dc044b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
004c579e7dc3072db6f77bacd0dc044b.exe
Resource
win10v2004-20231215-en
General
-
Target
004c579e7dc3072db6f77bacd0dc044b
-
Size
5.0MB
-
MD5
004c579e7dc3072db6f77bacd0dc044b
-
SHA1
a103eec146ecf90bd94db885b9f36734e3409d74
-
SHA256
a387a1fd78d3021bc589b49e448d1014c266f259c395f1f77968be2b57c5f596
-
SHA512
91f894594c6cbcd5c5eda88c4985aa69701b1e47b2c935657d026a1580bfcbafdaa5dbc11e6a88f684ff2918111f89abbdc3d8c1a9c7517dc27f98708c6118b7
-
SSDEEP
49152:ou5PIZB79XTaCsTvTHC7JQ+jEdQoaJW/OOkgWxTgT5XZAdd:ou+ZB79mpTbY1E+oaIGy0E5Wd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 004c579e7dc3072db6f77bacd0dc044b
Files
-
004c579e7dc3072db6f77bacd0dc044b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE