Behavioral task
behavioral1
Sample
4979dc24b7d3dff54b971fda19d92923.exe
Resource
win7-20231129-en
General
-
Target
4979dc24b7d3dff54b971fda19d92923
-
Size
164KB
-
MD5
4979dc24b7d3dff54b971fda19d92923
-
SHA1
ce7c7ffeb74d80adf25ff8286e9aa646549af65f
-
SHA256
acb9e46f0555248a3555ebe546a76e114bbba7f74a6af68b1f70a3c9b8683c0b
-
SHA512
7032b5fa4db5ee0acd54cbff48de4b7f510a2cd8439993e4a05a6d95b60c556da09b1af721730887a95a1255e7ab8982f1230d9284586dac1f16ddc710644c36
-
SSDEEP
3072:m87j0KSt+viT6GVWpWpkuw+SMxV56adOtReGN8N:mbKcWp3+B56adO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4979dc24b7d3dff54b971fda19d92923
Files
-
4979dc24b7d3dff54b971fda19d92923.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 156KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE