Behavioral task
behavioral1
Sample
4c6df038c3f48a5570e60f614cad8ae0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4c6df038c3f48a5570e60f614cad8ae0.exe
Resource
win10v2004-20231222-en
General
-
Target
4c6df038c3f48a5570e60f614cad8ae0
-
Size
137KB
-
MD5
4c6df038c3f48a5570e60f614cad8ae0
-
SHA1
241bc5e37880d400456f3c0b9a0cfa4c289f675c
-
SHA256
75f870acb5ac60c3ddb0deaa3bc47ff77a9a1dde6c3ae193b074df826a056f65
-
SHA512
ad587083611e644b4b59badba64bea047135faa55ef5e47bc0077d75a4a71423c63c00783f44ad75edf6bc89d77bf3409bebae6320ac6a93a3b18e393ab326f2
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53W4:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c6df038c3f48a5570e60f614cad8ae0
Files
-
4c6df038c3f48a5570e60f614cad8ae0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE