Behavioral task
behavioral1
Sample
4cb19c43650344398beef926502a869f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4cb19c43650344398beef926502a869f.exe
Resource
win10v2004-20231215-en
General
-
Target
4cb19c43650344398beef926502a869f
-
Size
250KB
-
MD5
4cb19c43650344398beef926502a869f
-
SHA1
739d7e261dd39063f8d18081cf46e01b350169a4
-
SHA256
a3f60cdc3d7fe71ace0b22b60fa32bc90e2764c6cf6d5694e192097539373d46
-
SHA512
373f7f510a92a0c6e02b7433270359b7c91187ca75f27933f872985e7859f92c33051971c15a22e85b90c00e308e81fbd77d27b00b33add65c4dbb8702054584
-
SSDEEP
6144:hGyGoDjN7NLIAjSmHu2boCujVgdjesdfX7G:h3F7hHjSmHu4ox+NrfC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cb19c43650344398beef926502a869f
Files
-
4cb19c43650344398beef926502a869f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE