Behavioral task
behavioral1
Sample
4754b8c4eaefb33bc129701a26380627.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4754b8c4eaefb33bc129701a26380627.exe
Resource
win10v2004-20231215-en
General
-
Target
4754b8c4eaefb33bc129701a26380627
-
Size
3.2MB
-
MD5
4754b8c4eaefb33bc129701a26380627
-
SHA1
aec0282982ea88941364c712d206db220b1bd968
-
SHA256
502ebd2bc22d0120cba82bce66b56f3f2503bd1dca75b4a99271defc7872ae40
-
SHA512
04cdde469da1fe6ace357e89fdc6713b974bae369334289e454677dc71a10dbdf07f94df5db763ae82d24509b77138ea96c1645582ef9a0ec7381375ff95e6ac
-
SSDEEP
98304:9zduumDcakchS87ccakcH2P3drheY+ucakchS87ccakcO:9zd2DdlhS87cdlWPdhXdlhS87cdlO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4754b8c4eaefb33bc129701a26380627
Files
-
4754b8c4eaefb33bc129701a26380627.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE