Behavioral task
behavioral1
Sample
4eca79a07b9094bf4684eb4bb6acc865.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4eca79a07b9094bf4684eb4bb6acc865.exe
Resource
win10v2004-20231215-en
General
-
Target
4eca79a07b9094bf4684eb4bb6acc865
-
Size
393KB
-
MD5
4eca79a07b9094bf4684eb4bb6acc865
-
SHA1
c6408ef34c41209914b59f0236a3cdf9238af6ff
-
SHA256
c769cb675ee68fd351e793e54721367b16121e177133866d6e95c1d0248a669d
-
SHA512
3ecdd04ac6b0d5c31a6c3403a4ff7b48025823dd45cf6f91814a04db44a5abd0d0c528e8b516a7f17ae43482c62ee94c241d4ff5c38ef4b87b673c0f2d80bd17
-
SSDEEP
12288:h3QEpniaNSnaaSFT3sKxbvJu73gsk0Riun:h3NpzNSaaSFT3p1uTgsk0Riun
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4eca79a07b9094bf4684eb4bb6acc865
Files
-
4eca79a07b9094bf4684eb4bb6acc865.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE