Behavioral task
behavioral1
Sample
4edf0425084af5a5a447d629743d9a1a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4edf0425084af5a5a447d629743d9a1a.exe
Resource
win10v2004-20231215-en
General
-
Target
4edf0425084af5a5a447d629743d9a1a
-
Size
80KB
-
MD5
4edf0425084af5a5a447d629743d9a1a
-
SHA1
5c04a081c138a055bc751cfd2d33c8be22a660e0
-
SHA256
5017fff21b7ef8f0995269d38373a67fabc938750053472f9885985ad07b8c45
-
SHA512
bc61acdc6dc41d1027d53837bc90715e9237712e82dda11e3be15eb25a4758d4fdfe9c99daef18657668a6df3f478ec398a3935590f1af55164932d8014ceec7
-
SSDEEP
1536:ZXVJROvtM1w7MnM60OH0wRY3CaRi7siD1m4yJxzsROh0sRPa31Mv9VUyoClmOSvg:Zlgtz7s0Spe3jQ4iD1mYOh0sE31GZmTg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4edf0425084af5a5a447d629743d9a1a
Files
-
4edf0425084af5a5a447d629743d9a1a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE