Behavioral task
behavioral1
Sample
4b334fa8226a76895bc4aebb08eaf179.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b334fa8226a76895bc4aebb08eaf179.exe
Resource
win10v2004-20231215-en
General
-
Target
4b334fa8226a76895bc4aebb08eaf179
-
Size
89KB
-
MD5
4b334fa8226a76895bc4aebb08eaf179
-
SHA1
c083b88076f0d950b49940ae61126e873126a90f
-
SHA256
a7dc5dad267bd15f89295f15609b7e53d80a09df6e03130656780700798a0a15
-
SHA512
4e054bdcd76e2bc3650ceca5e546b60a6ff38e36fb72d45399a0b2693d6580ac5a41297f96e031a9d19bbcf0ee45387e49af68acebfbb387a719986895a1c3d0
-
SSDEEP
1536:+YjIyeC1eUfKjkhBYJ7mTCbqODiC1ZsyHZK0FjlqsS5eHyG9LU3YG8nC:LdEUfKj8BYbDiC1ZTK7sxtLUIG3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b334fa8226a76895bc4aebb08eaf179
Files
-
4b334fa8226a76895bc4aebb08eaf179.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE