Behavioral task
behavioral1
Sample
4b5803ac41d023e64049178cc72566cf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b5803ac41d023e64049178cc72566cf.exe
Resource
win10v2004-20231215-en
General
-
Target
4b5803ac41d023e64049178cc72566cf
-
Size
1.1MB
-
MD5
4b5803ac41d023e64049178cc72566cf
-
SHA1
f1801bfb683864375a4d4b1fdc62d045d4a952b9
-
SHA256
e83b802c148b72e5963b14784e5b9512777b874fe67decb3bced01cad1143250
-
SHA512
152f23af2d936533caca798fcbb5c857ed8203d4407adcce710ab5415b1c931f0ab2392ab9c6188303c7c3e37f2681bbd71e10e1c1793b1315ff19c9b9526300
-
SSDEEP
24576:iPN5WBvLYH/CwiWaTlxFt6MFkvajWvAoQFPKmKmYmRFwFlVwuTINFqBZ3u:iPDMkH/mW616EkCZoaqRPIE+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b5803ac41d023e64049178cc72566cf
Files
-
4b5803ac41d023e64049178cc72566cf.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE