Behavioral task
behavioral1
Sample
4092e91811fb49fa219c6b86d59f4a74.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4092e91811fb49fa219c6b86d59f4a74.exe
Resource
win10v2004-20231215-en
General
-
Target
4092e91811fb49fa219c6b86d59f4a74
-
Size
1.0MB
-
MD5
4092e91811fb49fa219c6b86d59f4a74
-
SHA1
5c32987b98c3bc92c87bc28669d35038c93bcee9
-
SHA256
240d5dab45664f63310cfdf5f352e50667d7ad46c1736839a506d9eb5c6c2e39
-
SHA512
2ee30f1db60be2bcf9fd46140c551a45013287b4013e2ba4e2b2f94c354990de34d988891bee1b1e7cb33a02f1a7100f3d209f5aa003ebd39c53d5b141f531e3
-
SSDEEP
24576:Cz4Vtrxe0e0KAPjg7wyCJXKcqq4brER9TZWAtmuCrThWvaW:Cz+Fxze2LgBCJNqhv4vWv8vaW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4092e91811fb49fa219c6b86d59f4a74
Files
-
4092e91811fb49fa219c6b86d59f4a74.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE