Behavioral task
behavioral1
Sample
4daa27941994b05136578e326148df18.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4daa27941994b05136578e326148df18.exe
Resource
win10v2004-20231215-en
General
-
Target
4daa27941994b05136578e326148df18
-
Size
3.9MB
-
MD5
4daa27941994b05136578e326148df18
-
SHA1
e52e19082d077be51be2ba01ebaed46437c52451
-
SHA256
631d75feb12229ed8ebc8fa6e5455f9f96a950e7e54ceca4273c904b4a426feb
-
SHA512
0185680b0ed604f2662c1d40ade63a308257c50d3db4474f41368a9f229dc4496271e2fe5b8f8f36a4f9fb74f13d71d9dd6df3c01542a27226fe94427c466580
-
SSDEEP
98304:ZgCphTrnevMUtuIgCClTKEOtNCUtuIgCClxjlmbVEPLNDUtuIgCClTKEOtNCUtu3:ZnVrnev3uVYEc/uVDlmbluVYEc/uV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4daa27941994b05136578e326148df18
Files
-
4daa27941994b05136578e326148df18.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE