Behavioral task
behavioral1
Sample
4de93c438e024d4acf62f72d14fa9477.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4de93c438e024d4acf62f72d14fa9477.exe
Resource
win10v2004-20231215-en
General
-
Target
4de93c438e024d4acf62f72d14fa9477
-
Size
133KB
-
MD5
4de93c438e024d4acf62f72d14fa9477
-
SHA1
281600766a90db9d6ecee8703ba65880106534eb
-
SHA256
0c8c80671dfa903fa58d4cb562b48b1ef392381ef9518eae4cdac52fedfbf89a
-
SHA512
9a6b12a6a22a3d018d4839c22095715de41c449c6f34cef2299791c3c89741bd8d7d215b55031b779420564ee7850ad44f4b92343b71675bca214293162a063a
-
SSDEEP
3072:/LntJZ3DojaIzUSqyG8Ps5N1rEggolDnVcc/mwSG5rAGvSqsNZJUCQ:/LntJZOakltG8M7E2Vc8mw55kGvSV8CQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4de93c438e024d4acf62f72d14fa9477
Files
-
4de93c438e024d4acf62f72d14fa9477.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE