Behavioral task
behavioral1
Sample
4c4b1a83f61fce6e573da8d5552ee0f8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c4b1a83f61fce6e573da8d5552ee0f8.exe
Resource
win10v2004-20231215-en
General
-
Target
4c4b1a83f61fce6e573da8d5552ee0f8
-
Size
784KB
-
MD5
4c4b1a83f61fce6e573da8d5552ee0f8
-
SHA1
dd96880312c37c68c0ef25ac3749e15164b1d719
-
SHA256
332d879ecab17a8a842706e56c41d0e42c51aca2d9f6c27f6077f93e5eec3261
-
SHA512
85ca33a05d85995196fc949cf3b0dee5fdee1909b4d4ea306da1dce7f37d7b501e37425925623f672c155b61c7cd1672f875106312e730c4d3844b4d8c039b78
-
SSDEEP
12288:OUdnSWhHet9sfaeSX8c5rQV3nmJZ+beUzCM+iK72TVBIhqtdVVO3pN1lQG0:vSWhHeboi0VgE/zCxik2/I8BM3pN1+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c4b1a83f61fce6e573da8d5552ee0f8
Files
-
4c4b1a83f61fce6e573da8d5552ee0f8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE