Behavioral task
behavioral1
Sample
4e612c26b0f4d70c958f9182b1a9b22b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4e612c26b0f4d70c958f9182b1a9b22b.exe
Resource
win10v2004-20231222-en
General
-
Target
4e612c26b0f4d70c958f9182b1a9b22b
-
Size
97KB
-
MD5
4e612c26b0f4d70c958f9182b1a9b22b
-
SHA1
660c2abb0539d0bae12c76cbfd3f97a25e435e07
-
SHA256
b80f50485448d5a00d959b603f2da6d14c7a755192fe22a809791646b846c81c
-
SHA512
6b37a20f0eb7da1e52bd8e989cd52fa984aae5f6a4b4bfac519992c3c190a61f37b2ca6fc04e5fbc4fd288813b128d3cd7d6b95240ffa070ded294135d7bb33f
-
SSDEEP
1536:SKcR4mjD9r823F+MmIeYbvolNlSFIJ63RRsv9ktuOf1KRX9v:SKcWmjRrz3kllEIJ63EEuO9KRX1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e612c26b0f4d70c958f9182b1a9b22b
Files
-
4e612c26b0f4d70c958f9182b1a9b22b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE