Behavioral task
behavioral1
Sample
4ec667a1d6a962070df636a75905e677.exe
Resource
win7-20231129-en
General
-
Target
4ec667a1d6a962070df636a75905e677
-
Size
91KB
-
MD5
4ec667a1d6a962070df636a75905e677
-
SHA1
50bdcae3c5fdd60a437ea8779a227f53ea2be0f9
-
SHA256
7def19525a3bf0067d6147b1bfd33b720bac523f0cd38c882a2d742ac36abd40
-
SHA512
8f1197ed7d161aade177ad2929a44564d8cdf9dba99caac93b7e44c1b9f02a1b2a51eaead4f1d8796fcf95af02b56435165cd1311e2d0c4132c30f7baf2d41fa
-
SSDEEP
768:XTToANTmNOdkk7taeICWzDpCMJrBDsX9MihU+jdVZWtdATTo1:XTToANqNOdRDWzdnsdhUsZWtWTTo1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ec667a1d6a962070df636a75905e677
Files
-
4ec667a1d6a962070df636a75905e677.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE