Behavioral task
behavioral1
Sample
4aa82364961ecb7768e60526b1fa21b5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4aa82364961ecb7768e60526b1fa21b5.exe
Resource
win10v2004-20231215-en
General
-
Target
4aa82364961ecb7768e60526b1fa21b5
-
Size
119KB
-
MD5
4aa82364961ecb7768e60526b1fa21b5
-
SHA1
2e07825b3f8c23708bde1e89bd7ee9c992a2d64b
-
SHA256
dd074a149a63e535e0305e027405ca40c5a6eaa2e99c8a42e35083de365ee0c6
-
SHA512
dffafcf2f3307060067c961d741e01c574b93180ceb7a93d5a3432c4bb3e8322ba7921d192c702845c6f038d6cde146dad6b78c5337fe0e8979cb5657584a292
-
SSDEEP
3072:U6NeDWoikyrvIhFurXGUX2if1Ti2mOZlSW8kP:lEylkyLsFuLRX2MztfJP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4aa82364961ecb7768e60526b1fa21b5
Files
-
4aa82364961ecb7768e60526b1fa21b5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE