Behavioral task
behavioral1
Sample
4b03e3fc9f30f7dd1c0fc5ff5fe50046.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b03e3fc9f30f7dd1c0fc5ff5fe50046.exe
Resource
win10v2004-20231222-en
General
-
Target
4b03e3fc9f30f7dd1c0fc5ff5fe50046
-
Size
43KB
-
MD5
4b03e3fc9f30f7dd1c0fc5ff5fe50046
-
SHA1
e41929adc283bcc70a8c80a416189dde51a65eb7
-
SHA256
e8f62d36cb413e39048120db6b1ae20af4307dbfece15eafc79c566261a723c5
-
SHA512
9b1127c96e0c7c04fd8d65fb4f4a13bfd0e29264ebd3bb92bdce6557f0c6ae91ed077ea0a0b757e81b2d216a414939255e092981bc7b1c71875af235346b5b9c
-
SSDEEP
768:0dDNVFES3Zb+X8awTHfMxgSbzQTZldJV1CiWTfd6gjn0pQKsvWVD2U360u/Iv:0dDTFbQX8awTExjXQHdJVFKnS9suct0N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b03e3fc9f30f7dd1c0fc5ff5fe50046
Files
-
4b03e3fc9f30f7dd1c0fc5ff5fe50046.exe .ps1 windows:6 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE