Behavioral task
behavioral1
Sample
4acd6cfca8ed9f30c05b96410e85c795.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4acd6cfca8ed9f30c05b96410e85c795.exe
Resource
win10v2004-20231222-en
General
-
Target
4acd6cfca8ed9f30c05b96410e85c795
-
Size
1.3MB
-
MD5
4acd6cfca8ed9f30c05b96410e85c795
-
SHA1
bee0e3bc4f44d0d895e7cd9eb70037cfbdb23ce2
-
SHA256
e25ff334102a4990a6106836941090596df3e7a0527321b547f6ef86bee26e9d
-
SHA512
6f5da52133526b12d4cf78f300d5a9932a189e89c292a8840e16dbf9eee6d33d63413bce65742eb4a9525eb0adb55af7604026dba26fcaf22d17077b3039d753
-
SSDEEP
24576:F8JaUbPJwJRADqCrdcSnQqbk0NrDwLD1VwFC481v358D2yz6/aDWvVpqvG:wN2LADqyDnQqbP4TsCT5y2S1avV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4acd6cfca8ed9f30c05b96410e85c795
Files
-
4acd6cfca8ed9f30c05b96410e85c795.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE