Behavioral task
behavioral1
Sample
4370ee8c0e636f156e8f0af4b1743901.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4370ee8c0e636f156e8f0af4b1743901.exe
Resource
win10v2004-20231215-en
General
-
Target
4370ee8c0e636f156e8f0af4b1743901
-
Size
1.5MB
-
MD5
4370ee8c0e636f156e8f0af4b1743901
-
SHA1
4dc0743d7fa8b36ebd73ac694574eff9049cf00b
-
SHA256
71cfd8a548d1b83006c45fc417186d36da813e864d415dbd41369bdcb45e9f11
-
SHA512
98b5a0ef9436b57f3fc5fb1c9ccb95131005c09ff0ba80252058f88d00f012c17d75c15d6c41bf01fb1229535c793ab344bd7677cc72c01549882b33abb52810
-
SSDEEP
24576:yGkQq4m8v5mAnpW9p33dTl681zgcpfK8ll6ZVLZJWfbSX1W:ytL8v5mAn213dTl68lgcpfKe6ZVL9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4370ee8c0e636f156e8f0af4b1743901
Files
-
4370ee8c0e636f156e8f0af4b1743901.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE