Behavioral task
behavioral1
Sample
4707452323244aee2d0a30600d8013d1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4707452323244aee2d0a30600d8013d1.exe
Resource
win10v2004-20231215-en
General
-
Target
4707452323244aee2d0a30600d8013d1
-
Size
501KB
-
MD5
4707452323244aee2d0a30600d8013d1
-
SHA1
1560081e8c154f76249bce89ea1043023e8d9d94
-
SHA256
366bc6e07c3b605317a11393b8555eed542e3ff5bb5660c7b7458bc9322fdf85
-
SHA512
256cce7f5c1570e4d06e23fd1c322ded0c152d958744ea972ed81dc5c41dcb455bdfefefd53d70cae168c34c2cbae1bf8401bcbef14bd677ff6b2db2d80b24e9
-
SSDEEP
12288:m1vupWZzEeP5xwHnrkTcgLxnH8Sb41zAyPAyCbo7CpzqzjVvL:0vzKgTc0PzyPTCbo7CpmzV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4707452323244aee2d0a30600d8013d1
Files
-
4707452323244aee2d0a30600d8013d1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE