Behavioral task
behavioral1
Sample
4cd49a4226000b7958f17b8d43f69ac0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4cd49a4226000b7958f17b8d43f69ac0.exe
Resource
win10v2004-20231215-en
General
-
Target
4cd49a4226000b7958f17b8d43f69ac0
-
Size
209KB
-
MD5
4cd49a4226000b7958f17b8d43f69ac0
-
SHA1
1d80d6a666068ec81d0e4434823861901c1d472a
-
SHA256
26213c762aa920495a8b699b2657646f6c0d37a861ff043a128fbb1639d67ec4
-
SHA512
6fed786ba1646a625db27712f8a4e595a4a30382a91cb950a2f8c0529c391cbd8b46fb0de611773ff8274544ebe9245fc5fe95f0135b1cb810f28f35d357b459
-
SSDEEP
6144:VqzqyMHx3xHjn4SjWbhkIfbWWTvZs0Tx61Drq:VJHxVjnmkQbVs0CDrq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cd49a4226000b7958f17b8d43f69ac0
Files
-
4cd49a4226000b7958f17b8d43f69ac0.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 204KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE