Behavioral task
behavioral1
Sample
4aef17272ba6216595b3d11d9bf6292a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4aef17272ba6216595b3d11d9bf6292a.exe
Resource
win10v2004-20231215-en
General
-
Target
4aef17272ba6216595b3d11d9bf6292a
-
Size
18KB
-
MD5
4aef17272ba6216595b3d11d9bf6292a
-
SHA1
c81f563f5c34e4f85406f9dfecebc10d8e2bf212
-
SHA256
e925c3af6910ffff2b17886d5d07910755587c8c58fd51608907627261b10c77
-
SHA512
40595221d2070b6018b281cb45a8b784f9fb0567bd7611ec292045ce8fa4b2e7dd6245b0e9c0299efd35bcbdc74130f9933501cc7c97f28e7c241fa41d7725cc
-
SSDEEP
384:emrPDGSDhou9SS0YI3gHuwAKOcy7m3wMBt3xHDi6v:hrLGuNSZYI3gHuwR67m3w47Hhv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4aef17272ba6216595b3d11d9bf6292a
Files
-
4aef17272ba6216595b3d11d9bf6292a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE