Behavioral task
behavioral1
Sample
4bf0b8c29aa067fb5052b651a569d491.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4bf0b8c29aa067fb5052b651a569d491.exe
Resource
win10v2004-20231222-en
General
-
Target
4bf0b8c29aa067fb5052b651a569d491
-
Size
1.0MB
-
MD5
4bf0b8c29aa067fb5052b651a569d491
-
SHA1
7a9609e49571c39619669f1422cde5dc9558fa85
-
SHA256
1658e551ae4eed2c1fa45aedbb7c3e3ca41ce165dceed57efe86afe5d628e63c
-
SHA512
8615f073fbf69eba761c6a25e6d24ef3e6b2e7c4fe8a3527af479579dc06ddea212d64d9eaa460fec9a85391db2652f647d0e175e6eebd373976fecc9cb2eb24
-
SSDEEP
24576:hvZiAzOuidl3qfBr2Tcc/55HnE47bhZJfx0IC0FXLR3:hvZrzOu4YfBr2TF5NnE4f9B73
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bf0b8c29aa067fb5052b651a569d491
Files
-
4bf0b8c29aa067fb5052b651a569d491.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE