Behavioral task
behavioral1
Sample
4b5974d8e90883072b1f9681e5e4324b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b5974d8e90883072b1f9681e5e4324b.exe
Resource
win10v2004-20231222-en
General
-
Target
4b5974d8e90883072b1f9681e5e4324b
-
Size
133KB
-
MD5
4b5974d8e90883072b1f9681e5e4324b
-
SHA1
bfdabdda260ac9a32c4f3adf6bbfa047e591f2ce
-
SHA256
c596bd3420cc0154171a0f9afcf8bb67b1b150de4de330a67c8e61e9bee9cf21
-
SHA512
8dec63c7a4306472edd111430de4963da7ad7e42d68993a1356ed7034f3bf2788255f4420c8ace8c77bf36d4c807b6da9fa1aed8617e95ede3a4a77d95cffbe5
-
SSDEEP
3072:04FodEdhv4ed9+yMmU39XS6estm23254DtVwiYDRdqamPAQ:04Foqhv4xvtSv2w4/HOmYQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b5974d8e90883072b1f9681e5e4324b
Files
-
4b5974d8e90883072b1f9681e5e4324b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE