Behavioral task
behavioral1
Sample
4c6e52ffb980ec98b166ece5307c4000.exe
Resource
win7-20231215-en
General
-
Target
4c6e52ffb980ec98b166ece5307c4000
-
Size
379KB
-
MD5
4c6e52ffb980ec98b166ece5307c4000
-
SHA1
8219ad80a4a752ecef4c9d0c05fd9b1affe24e92
-
SHA256
2da883bb2fbe127fee1ecfb7e6059e6cf4d65b047543ffb885d75debb3e0bc46
-
SHA512
5f975c84b141631c318d21ffa48bd295c1c87903eec93bd251fdcb2128ce28aeae7aa681e7e655eb2cab3232064b35c94978b3dedf57fd68ad61632501290ab5
-
SSDEEP
6144:G+qn/00gA1pJzXsWuTHgU9xGJRKeOGDykNwS1F8kqslg92YAoS0LE6:gs03z8tgkGJRxpw4osO2JoS0LE6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c6e52ffb980ec98b166ece5307c4000
Files
-
4c6e52ffb980ec98b166ece5307c4000.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 880KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 305KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE