Behavioral task
behavioral1
Sample
4cd2127390f7e3d5649e9e38392949eb.exe
Resource
win7-20231215-en
General
-
Target
4cd2127390f7e3d5649e9e38392949eb
-
Size
784KB
-
MD5
4cd2127390f7e3d5649e9e38392949eb
-
SHA1
d91736a6ae3a7d9e3f61e020f932540d1a949cc5
-
SHA256
02af906b72d84abbc9de924e6403dcc532f26e5398bf917cf64dcfb023fdea75
-
SHA512
c128da39987150a03c1f2fc385c95e6f39c81d7292dd3fa4b6400d8609821b0f378d763781ac4c0f8904352be50c5e5d1eb6ab296d353ccdaf6f715426e6cd71
-
SSDEEP
12288:VzcKiTllC/oixkDKVRDl8Vg35ff5VP6VRWizyL+SSDNEc7HvtnY0Sz0Kch+m5fZ0:KKollyhO+dPKWieL+hhEEYfch+m7DnA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cd2127390f7e3d5649e9e38392949eb
Files
-
4cd2127390f7e3d5649e9e38392949eb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE