Behavioral task
behavioral1
Sample
4115123d26089f2ce09fffb8aa7e45ed.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4115123d26089f2ce09fffb8aa7e45ed.exe
Resource
win10v2004-20231215-en
General
-
Target
4115123d26089f2ce09fffb8aa7e45ed
-
Size
93KB
-
MD5
4115123d26089f2ce09fffb8aa7e45ed
-
SHA1
ff430b58bf30a551e088fcf23670643449adcc5d
-
SHA256
8d6f3c6ba6daa46ca65a19d91ac95fb0929aeed94954fc9cc99e4abecc256904
-
SHA512
07c435c4270b7f4266d832bacec231a1b15dc104502e28c175622e8a5a5538142d04240d53280d97d8c26c2a8ee912455aceac42c9f7e5cf44220bc0a0b4f446
-
SSDEEP
1536:SKcR4mjD9r823FIKNqlkQ8z2iVBrSKSwe8xwwkZs3IXEP:SKcWmjRrz3m2qz0lXkZs3ic
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4115123d26089f2ce09fffb8aa7e45ed
Files
-
4115123d26089f2ce09fffb8aa7e45ed.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE