Behavioral task
behavioral1
Sample
4309966a4ff7ab7b2d4416949c75961d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4309966a4ff7ab7b2d4416949c75961d.exe
Resource
win10v2004-20231222-en
General
-
Target
4309966a4ff7ab7b2d4416949c75961d
-
Size
133KB
-
MD5
4309966a4ff7ab7b2d4416949c75961d
-
SHA1
b7770160446744a24e3ab18299b9ad17fa825458
-
SHA256
a0e99baf8c3a31a5cda77911a543cb4866f8a6c3c1ffb1cbe4daf6be49d03ebf
-
SHA512
04f0389e3bd98978a9eca76549402fd810baa2ddc117c450241477ddbcf78684a36f6e5b09e1c8a402f4749db6cb1a54ee1a1348bcf24affde5d2175b4f7cc70
-
SSDEEP
3072:MnZH41xBuiJ6v/Lcn7+dPYuVAFoO/yzsR0QdXvA0Q:Px4NCkAUBvsR0QdXvXQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4309966a4ff7ab7b2d4416949c75961d
Files
-
4309966a4ff7ab7b2d4416949c75961d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE