Behavioral task
behavioral1
Sample
4ef279838519aed5bf8f668f5571a3fe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4ef279838519aed5bf8f668f5571a3fe.exe
Resource
win10v2004-20231222-en
General
-
Target
4ef279838519aed5bf8f668f5571a3fe
-
Size
2.6MB
-
MD5
4ef279838519aed5bf8f668f5571a3fe
-
SHA1
df4f743de4a1f3e43c67b6fa5d771fe9a9074ef9
-
SHA256
aaa3d24bb7298ae06b66fad33d816b5f0ff719f5eccfee42113b657f4abe5f5f
-
SHA512
11e70172caed3ce4d5429f1416b818b101e7396c04c32e4b631936d9baeaf58ba52daa28a4f8aa9d7cf938b27a040a34bc0c735b533b0b32d77f00a66b67e4e8
-
SSDEEP
49152:GT70ov14G7Pf9nURbKVUd8e0Tn9/e2p6Lej5ay3:E7jlVUAlBe2HF3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ef279838519aed5bf8f668f5571a3fe
Files
-
4ef279838519aed5bf8f668f5571a3fe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE