Behavioral task
behavioral1
Sample
4d2485d323f6e087448be13773cc20f7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4d2485d323f6e087448be13773cc20f7.exe
Resource
win10v2004-20231215-en
General
-
Target
4d2485d323f6e087448be13773cc20f7
-
Size
302KB
-
MD5
4d2485d323f6e087448be13773cc20f7
-
SHA1
eaf2f46533a4a88cd825825bcdb434a3095ef28a
-
SHA256
41599543c7feee31c8702a711ac2019a5af7c50e344bd44d9ae6350cbb932468
-
SHA512
665555293e468c4d9dbde79e23a37307ab7362b4a756d11794fe9b0dafa46b58c8726de6ed6d912c38e1f072b71a78f3d96358a81c31d3d60e100f54793bb104
-
SSDEEP
6144:7kt2y0hmdopXnc+a0ZDPkKntm8lP0fu4mQ:G2OdZ/SDMKnE8Wm4m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d2485d323f6e087448be13773cc20f7
Files
-
4d2485d323f6e087448be13773cc20f7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE