Behavioral task
behavioral1
Sample
4af95c914a9f9612a4b76a78461e0e56.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4af95c914a9f9612a4b76a78461e0e56.exe
Resource
win10v2004-20231215-en
General
-
Target
4af95c914a9f9612a4b76a78461e0e56
-
Size
133KB
-
MD5
4af95c914a9f9612a4b76a78461e0e56
-
SHA1
073762dfb3e981e7d8dc0943d63d3004e762b669
-
SHA256
9597e4c12a31f29e78aa81be09089d69bfbe338d3f60d4709f417022542a0706
-
SHA512
975e4b9073958ad056fc1333a7156a59cd42552f7e604adf0ec533bfaaf9db0093e8727848eb2d3eb31279ce04a40e6dfa1d4a0a525076328bb9df9e6cfd784f
-
SSDEEP
3072:mA6qE1r7a/oQ9oGD28uYdnPeJ3fQ9GDvAIpX971ATjjocrrxMIV+G1MWQ:mtqR/t9odLYtPeBQ9ovAIpV1KjNrF3bA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4af95c914a9f9612a4b76a78461e0e56
Files
-
4af95c914a9f9612a4b76a78461e0e56.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE