Behavioral task
behavioral1
Sample
4ca441141bfa01c1cb4e128cbc249085.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4ca441141bfa01c1cb4e128cbc249085.exe
Resource
win10v2004-20231215-en
General
-
Target
4ca441141bfa01c1cb4e128cbc249085
-
Size
1.5MB
-
MD5
4ca441141bfa01c1cb4e128cbc249085
-
SHA1
be108e254e91f740bc11d3d765d05d37b43ac714
-
SHA256
b84bee02fb1e108fe23713093cacb7ead4926828bda93507f4c831212564bf83
-
SHA512
1f60b8cb81e94f95bcb9297ef90307de5b8cc9c40954e96e5e05eead861d67aa2752011250723763c78559edce5a82b1ae7881c99387366bbb88043972fd3b67
-
SSDEEP
24576:/i1e0lID6hlPTdRW8oCVrYFLDkdOQHRgQ9BJJwsD7S7pQ2/NiRA5dRBD5bxW:K1euICdTdRW8ox66up3UF2AjvD5bx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ca441141bfa01c1cb4e128cbc249085
Files
-
4ca441141bfa01c1cb4e128cbc249085.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE