Behavioral task
behavioral1
Sample
4c9edfcc5520efc646a99756f401cd9e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c9edfcc5520efc646a99756f401cd9e.exe
Resource
win10v2004-20231222-en
General
-
Target
4c9edfcc5520efc646a99756f401cd9e
-
Size
1.5MB
-
MD5
4c9edfcc5520efc646a99756f401cd9e
-
SHA1
89fe9086e00b12ba067e7c5ceb4f02752fabd072
-
SHA256
1e85eabac6c3e7761b91c4a8afa77a8312ec9030b1ac3df107e887757afd16b6
-
SHA512
effc98a1177935bc55aa050b28f84bcdb0b458ec8885dfce0dfff5f68618df574991db1ab74ee59167157c9da2f90011b22865afa3f463c217f7569a578b80fa
-
SSDEEP
24576:rU1sSJv40y//Jhf9jcjukL2N3I5hC2TH5tY9NlqMcjukL2Y:rUKSJRy//Jhf9jcakLWqhC2TH5t8Nlqz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c9edfcc5520efc646a99756f401cd9e
Files
-
4c9edfcc5520efc646a99756f401cd9e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE