Behavioral task
behavioral1
Sample
4c8f4302818fcb5996d5386b890fffcf.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4c8f4302818fcb5996d5386b890fffcf.exe
Resource
win10v2004-20231215-en
General
-
Target
4c8f4302818fcb5996d5386b890fffcf
-
Size
2.9MB
-
MD5
4c8f4302818fcb5996d5386b890fffcf
-
SHA1
0e5e8783b823da64c711c814a9730f2fbe54f8b2
-
SHA256
a6752ef7b7e72f8a57974b8bea39f4de76866b1c4dcb1c7ec838f095fc90f5ed
-
SHA512
db9672d55850ff8586c843d81346f344f4214d619356a56c833f84649f9c6423a32a612586096630281dda0af80c8b01a482ee34a285f2eab1e48fa64a1a4acd
-
SSDEEP
49152:6qHcse1AsuZG9BGrV4qU36ll8Hz3IF5yj3FmOr3M45DnUXOb88PoHeSJ5lD58EB1:6q8dtu4n02936EIryjnj54XqDSpPB1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c8f4302818fcb5996d5386b890fffcf
Files
-
4c8f4302818fcb5996d5386b890fffcf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE