Behavioral task
behavioral1
Sample
444b641e9636511cee7da17339618a9e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
444b641e9636511cee7da17339618a9e.exe
Resource
win10v2004-20231222-en
General
-
Target
444b641e9636511cee7da17339618a9e
-
Size
3.2MB
-
MD5
444b641e9636511cee7da17339618a9e
-
SHA1
d6cd47ca72a3807c75839c64de9fd5f041cf72df
-
SHA256
4e3aa0f38b0b570286193f8f748df713f133f6c0563ce28f03ce7d571575f60d
-
SHA512
d026523745ff8425c53a3c64e72e8e9234839f3e58127505c6c47f35d17b0ac67159142b99c48124582dfbf71d5190fe4d053d3925b76ee4021aa17df377372b
-
SSDEEP
98304:fzWt1R5sOcakc7uRHBLLMecakced7XnSIcakc7uRHBLLMecakcO:M1LsOdlqRHBLgedlgXSIdlqRHBLgedlO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 444b641e9636511cee7da17339618a9e
Files
-
444b641e9636511cee7da17339618a9e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE