Behavioral task
behavioral1
Sample
4f62ea5e9015f220f1b8691375e52ae5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4f62ea5e9015f220f1b8691375e52ae5.exe
Resource
win10v2004-20231222-en
General
-
Target
4f62ea5e9015f220f1b8691375e52ae5
-
Size
133KB
-
MD5
4f62ea5e9015f220f1b8691375e52ae5
-
SHA1
e8731dc527a7d13ead85a1b2d5074488e17e50b5
-
SHA256
7c9c3b2b8a5d45a0c930d474b6c1e6b6ca62abf9d4d362a0e2eae762adeaeb52
-
SHA512
943f335de12a4047e2471eca7e17526357338cdb87a049792ddc37b2c0fa9221b080a4e1d42d7f3f8af79a77e5bd58ed71c8afbb80d7b360eb635813dbb9252c
-
SSDEEP
3072:cxceeJmaE9LaQ/tm+9CdGuKhtcNRJIpAYdkU0uCf02Fs9Q:cx+EZPVmu50L2kU0Jf02s9Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f62ea5e9015f220f1b8691375e52ae5
Files
-
4f62ea5e9015f220f1b8691375e52ae5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE