Behavioral task
behavioral1
Sample
4cf850de40de30388b8f3468ec3575ad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4cf850de40de30388b8f3468ec3575ad.exe
Resource
win10v2004-20231222-en
General
-
Target
4cf850de40de30388b8f3468ec3575ad.exe
-
Size
1.4MB
-
MD5
4cf850de40de30388b8f3468ec3575ad
-
SHA1
62631edc0cf8545b3f2e02d2ba07598601b5c0a5
-
SHA256
12b88944d654e5fd53e82696b509739465b5c0cb93097640b5d5e3eefc662065
-
SHA512
9f812c05b17277f06e0863ec7cd44fc8d8390f9cd3432a634279b18bc54d7e03faad873ca28d494ccba8dedd8ffd0a7da08fd295f5a9316a2ebce3ffe93b5fed
-
SSDEEP
24576:VP9XNUZbaXVl7AhsMKKx/RbDVv9YudG1Q3Nktx3JYqRPXA7AkrKdN1O/DO20k4nN:OZbeVOhsMbBRbR6u81jJYtro1oD50nN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cf850de40de30388b8f3468ec3575ad.exe
Files
-
4cf850de40de30388b8f3468ec3575ad.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kxvu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.psfx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fpugn Size: 512B - Virtual size: 4KB