Behavioral task
behavioral1
Sample
4b115daa76c4a5d7b64a23a85d467f71.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b115daa76c4a5d7b64a23a85d467f71.exe
Resource
win10v2004-20231222-en
General
-
Target
4b115daa76c4a5d7b64a23a85d467f71
-
Size
1.5MB
-
MD5
4b115daa76c4a5d7b64a23a85d467f71
-
SHA1
4ec221e2fe40efd480d4254d81d8fcfb415b4bfb
-
SHA256
5b37a5cc3172db1fed51bf54197db6227ae3a317500cf8b28b6cd18b338745e9
-
SHA512
8b0df92b4ca64fa5a392645cb470529952e31f082fab98981b994cb8138909001e5bf06e7a44c0b6b92125636a3674639b255ec7e036780d9e68b021f37f8bda
-
SSDEEP
24576:KXh7CamVMu1fxHQutd8xxdMi79e63eSnj8CJCitgh8VyeW:KF8VJ9lZt+xjrOS3Vtgh3e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b115daa76c4a5d7b64a23a85d467f71
Files
-
4b115daa76c4a5d7b64a23a85d467f71.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE