Behavioral task
behavioral1
Sample
4b85c8871586b3d85edd575a498992be.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4b85c8871586b3d85edd575a498992be.exe
Resource
win10v2004-20231215-en
General
-
Target
4b85c8871586b3d85edd575a498992be
-
Size
283KB
-
MD5
4b85c8871586b3d85edd575a498992be
-
SHA1
c35da1c29c1f8adec9bd329a745950db22e42e67
-
SHA256
8ec50a7e35fc123f4c9931368f688a60387b92d083c8089e0e68bb57f3434e26
-
SHA512
4a4873756c019bf424bf56dfab075dfd48b8f4bdb0c5cd6eaeaee4ff4afcdfc8cc0a17fa93347cb8463565c0d4566b7ed3b2b85e9978250afc9784f5b176ab6c
-
SSDEEP
6144:Y5NbPfse8mIxXLvfOWn/iWtZ67aOmEYRw6:iNbP7831Lv7/tpzR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b85c8871586b3d85edd575a498992be
Files
-
4b85c8871586b3d85edd575a498992be.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE