Behavioral task
behavioral1
Sample
4743c23ea81d4c6f3978a3bbe35ba0f9.exe
Resource
win7-20231215-en
General
-
Target
4743c23ea81d4c6f3978a3bbe35ba0f9
-
Size
64KB
-
MD5
4743c23ea81d4c6f3978a3bbe35ba0f9
-
SHA1
e404b23d39c507b0eecb6353acf1b19cf01f07a2
-
SHA256
83ce8e1ba60428406787408e214774c66e99fe1902b1ee5fce236dc9eebe645d
-
SHA512
a25df0cdbd120c91bedeca35b35a599138a00d171d4342f1e9fc5acb3a7d8da152055cc68777ec2413bd9853e1223e25cff78ef3143b0d9e9971483ce98602ac
-
SSDEEP
1536:XzVGf+Egl+h970I8LPt3koygampew4PBzs0XEnouy8N:8glltVeceXApoutN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4743c23ea81d4c6f3978a3bbe35ba0f9
Files
-
4743c23ea81d4c6f3978a3bbe35ba0f9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE