Behavioral task
behavioral1
Sample
4660686de0f79a9c2ab92ba6f741bc91.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4660686de0f79a9c2ab92ba6f741bc91.exe
Resource
win10v2004-20231215-en
General
-
Target
4660686de0f79a9c2ab92ba6f741bc91
-
Size
1.0MB
-
MD5
4660686de0f79a9c2ab92ba6f741bc91
-
SHA1
f880ee9cbcf8d4a8fee82808e8c4c17366abc346
-
SHA256
c7448f40b4758c4c17a6d992e408368aba1c2d4c995eac10f3a35027d3ff0ca2
-
SHA512
8a715ad53f7d822e2b54d5fc24daeb8be75c8f4f5276c585cc949c79ca940b45eb152b3f2fd20ff7e3255386cd0bfe5d1e38e5ab58ca783174eb6755e76c4710
-
SSDEEP
24576:/Q85btxt+k0yNAkJn8UwQcvvDbiQHA6Q21nY7esYMPqAX:/QQpn+k0/k8UuvXz1YYAqAX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4660686de0f79a9c2ab92ba6f741bc91
Files
-
4660686de0f79a9c2ab92ba6f741bc91.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE