Behavioral task
behavioral1
Sample
4b4fd37830f9109198310437fbac4502.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b4fd37830f9109198310437fbac4502.exe
Resource
win10v2004-20231215-en
General
-
Target
4b4fd37830f9109198310437fbac4502
-
Size
123KB
-
MD5
4b4fd37830f9109198310437fbac4502
-
SHA1
8a025add421547c584562be51d7bf84cc5ea4749
-
SHA256
b609120c4c9eaf89f18007d99d6501b2deb9ce30be5b33d219834735856d5db2
-
SHA512
cd5b96dc8f143675334c6f2fc41cb268e5f21d52ce6e99c35a10c546cab49361c81cfa3b283123c6214d026e3caebf5206ce95123b1fd685e82f9414258557da
-
SSDEEP
3072:SKcWmjRrz3ZKcWmjRrz3YaUu/p2eQHSiwQy3sFt8H:hGyGYaUMo1wQgsMH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b4fd37830f9109198310437fbac4502
Files
-
4b4fd37830f9109198310437fbac4502.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE