Behavioral task
behavioral1
Sample
4f8b4a72bade38bca93ce1159d2d1b7f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f8b4a72bade38bca93ce1159d2d1b7f.exe
Resource
win10v2004-20231215-en
General
-
Target
4f8b4a72bade38bca93ce1159d2d1b7f
-
Size
1.3MB
-
MD5
4f8b4a72bade38bca93ce1159d2d1b7f
-
SHA1
d2c0709bd65f0b74de10998aed1e07a062e8046a
-
SHA256
d5f1d1bffc3d52390bfbca0eebb82fcfe167f28a051f0daa916df98679d1125c
-
SHA512
f1d4a7484a85b235cf94ed76b2f664f78c6cb9f8d9194b2b9f5c91321fdf077f5cfecdb8d97e24693140c278ad1f92b6bb0d3016541765515dade338c7100eaa
-
SSDEEP
24576:ACEgTAGecr8ILPc5AEF8PYH6Gvz9DP2x1IVUuk8zAXHbrwHBWc:7AGrHo5AEF8rGvz9rS1IVUz8zAXIp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f8b4a72bade38bca93ce1159d2d1b7f
Files
-
4f8b4a72bade38bca93ce1159d2d1b7f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE