Behavioral task
behavioral1
Sample
4d9cfcc2918f88b3117c4a0f26993871.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4d9cfcc2918f88b3117c4a0f26993871.exe
Resource
win10v2004-20231215-en
General
-
Target
4d9cfcc2918f88b3117c4a0f26993871
-
Size
115KB
-
MD5
4d9cfcc2918f88b3117c4a0f26993871
-
SHA1
62ad2cc7eee020573c9a03091c3ecace579d9b5f
-
SHA256
5cd7eabb41b5074ed5643baedac594859105f232eb8af3603b67c04372354410
-
SHA512
dcc4eb04e43c5792941bf5bd44d780c38694c1f73cbe80c52527f08d8e66a515e10eb02ef4ad30ad029f094b9fc7fddf40ec21a5a65de35aa23648039fe1eed7
-
SSDEEP
3072:SKcWmjRrz3ZKcWmjRrz3Cd7t3jP2QECPw9b:hGyGCHcCPk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d9cfcc2918f88b3117c4a0f26993871
Files
-
4d9cfcc2918f88b3117c4a0f26993871.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE