Behavioral task
behavioral1
Sample
4a5c6180c144fe9f3dab04494ddefa06.exe
Resource
win7-20231215-en
General
-
Target
4a5c6180c144fe9f3dab04494ddefa06
-
Size
1.5MB
-
MD5
4a5c6180c144fe9f3dab04494ddefa06
-
SHA1
f6cab3eecbcf2ca217d62920de37e679df7c23fc
-
SHA256
b9c31c5fdaaacadd0b93cd9086f287925908014fa8e135bf196393da9ad16ac7
-
SHA512
5e316f5eb05f406ff1edee28587618fb642bafc3090c6207c82fa861e8fa202d2ece26cb71938810d55859c1c1e7043041daf33ef3f102dee2009dd3779559c9
-
SSDEEP
49152:aNIxSEaBYgcRg54i8r2EnvzXta8wm3vzP:aScYgz54i2nvLEkr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a5c6180c144fe9f3dab04494ddefa06
Files
-
4a5c6180c144fe9f3dab04494ddefa06.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE