Behavioral task
behavioral1
Sample
4b75c944bcb49d122cf2d8d1e1a4c1a1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b75c944bcb49d122cf2d8d1e1a4c1a1.exe
Resource
win10v2004-20231215-en
General
-
Target
4b75c944bcb49d122cf2d8d1e1a4c1a1
-
Size
59KB
-
MD5
4b75c944bcb49d122cf2d8d1e1a4c1a1
-
SHA1
b85a488414f817a62254d36f52ba7c3bc950ac5d
-
SHA256
05ff3aa6dc2a943f5c8578ca45fdcd06c70c8ec463ab877bf0a1c8b1a6a78836
-
SHA512
0f60cc02080b0a63983997b71ce7b4972ba9a6fa9e8c2f5481ab089940f627deabbfe4f94f52e0ed73dbce901774151d691bc36709d62e3eb790995aeb03efd3
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFGocAX3LKew369lp2z3R:SKcR4mjD9r823FHKcR4mjD9r823FM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b75c944bcb49d122cf2d8d1e1a4c1a1
Files
-
4b75c944bcb49d122cf2d8d1e1a4c1a1.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE