Behavioral task
behavioral1
Sample
4ba7fc07724b1d21ef498cc6a1911008.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4ba7fc07724b1d21ef498cc6a1911008.exe
Resource
win10v2004-20231222-en
General
-
Target
4ba7fc07724b1d21ef498cc6a1911008
-
Size
1003KB
-
MD5
4ba7fc07724b1d21ef498cc6a1911008
-
SHA1
5acdd79cc9fb9bbb7634e54a67866f7435c3e234
-
SHA256
e4a1f7c1c7e672182cb322e226cb392bdf7bc1d39d910bdd5db690d7f3c9d66e
-
SHA512
337fc02b081e597875e35928cb73df0cabc93a0fd0e460025b6b6ab0dc1de1e318cd2bcdd66263e1f0580496f90d3b0eac96d4defe092681f9904ed4f0231258
-
SSDEEP
24576:7Qwp0w3BxL/QceaTTvRaP1cFW8Za7+Vj8l4g:7Qwp02BxL/VeaTTvgcFXZa7+98Og
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ba7fc07724b1d21ef498cc6a1911008
Files
-
4ba7fc07724b1d21ef498cc6a1911008.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE