Behavioral task
behavioral1
Sample
4620c7cde55e34cf2a51fbff49b32117.exe
Resource
win7-20231215-en
General
-
Target
4620c7cde55e34cf2a51fbff49b32117
-
Size
402KB
-
MD5
4620c7cde55e34cf2a51fbff49b32117
-
SHA1
f90a8822ae3d12fae26cd1de32878a69323cdff6
-
SHA256
e8cf671afbd761b393a8516f06e11bf29cea103d79c465bdcfcb8b3dc0973d72
-
SHA512
6c069ee2d642658a7bf7143a3da626dad2b9f2f2b7fe6f6fb2017242ca7ee87a04dd2eb6350105a0facb58c31df3e78b7066e04fe942b9c6d62ef442e7deb3d8
-
SSDEEP
6144:2maKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgU:XSmLAuEY71fviagATFmebVQDcYcg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4620c7cde55e34cf2a51fbff49b32117
Files
-
4620c7cde55e34cf2a51fbff49b32117.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.heowr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE