Behavioral task
behavioral1
Sample
4078be5ae739486b3a93088f6591964f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4078be5ae739486b3a93088f6591964f.exe
Resource
win10v2004-20231215-en
General
-
Target
4078be5ae739486b3a93088f6591964f
-
Size
2.7MB
-
MD5
4078be5ae739486b3a93088f6591964f
-
SHA1
d2aed4b529ef84ae24fff9117b093c3e9be4a3d8
-
SHA256
2d776db6cd7229540429322ede07e86c80838b629f40e9ac31035c0720ce4bba
-
SHA512
f90afdb9ab153e6f77a4d81184d23537e0f1b43b2ef1c7cf9a36ec184d79b077d3e4cef417bb7c7f0c4d5d050c90d5e08bf7f880938f2a61d6b66b61d0571517
-
SSDEEP
49152:sb/i10TxW6o/HB+gA6yS2RriR96CHYPU2GZvmpKGiLVe/QEtZZhd1YW8kvR9j:eZ0HBh54eHlHRopKtLVgltVduW3vHj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4078be5ae739486b3a93088f6591964f
Files
-
4078be5ae739486b3a93088f6591964f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE