Behavioral task
behavioral1
Sample
4fec56aabb0d6f1fcdd7b7804dc14414.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4fec56aabb0d6f1fcdd7b7804dc14414.exe
Resource
win10v2004-20231222-en
General
-
Target
4fec56aabb0d6f1fcdd7b7804dc14414
-
Size
483KB
-
MD5
4fec56aabb0d6f1fcdd7b7804dc14414
-
SHA1
0b4e287deb6c2c0dc3912987b1f9e9a58afb4bfe
-
SHA256
23cffcedc178c2b607696337ace6d97e780e09756f2aa2601e7d6222f03feb24
-
SHA512
318e0db08f09b6db6ec230918e2c7ba7b08733c4798c26197faa18e31482bd2fb7874826a24e0fbdcddcbfe7de423f34deecc0fad3ca16a611b98834e79da259
-
SSDEEP
12288:/2gmPCKJl1j5cIp9Q4DCrmJrYXext2UUi3E1VNx/OP://GCKV1lp95eVXextt38GP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fec56aabb0d6f1fcdd7b7804dc14414
Files
-
4fec56aabb0d6f1fcdd7b7804dc14414.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE