Behavioral task
behavioral1
Sample
4fd56ec47dffa229435e7b6bc2cc7eb0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4fd56ec47dffa229435e7b6bc2cc7eb0.exe
Resource
win10v2004-20231215-en
General
-
Target
4fd56ec47dffa229435e7b6bc2cc7eb0
-
Size
469KB
-
MD5
4fd56ec47dffa229435e7b6bc2cc7eb0
-
SHA1
d34cdd1b40b13c02ce710286844e16b71bee2604
-
SHA256
7511769d651eb8694839e951ff67f67eaa7abb15559dd74aee1a2970bb3ddcd6
-
SHA512
c7684146aea06693b23e87da550424939161e84ce1c30d44545fc7795c7883e948c2cbb64793100f57499117aaa34ea65ad93ed6e960c932fed5f82c87cb99be
-
SSDEEP
6144:ZTP96Pms6GibtDH5rrxl2yonHRUtA2gb9QA04aU+eOWHbXbvZ08:B96OdXlZrxl2yo2Gb9QN0+eOGbL5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fd56ec47dffa229435e7b6bc2cc7eb0
Files
-
4fd56ec47dffa229435e7b6bc2cc7eb0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 196KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE