Behavioral task
behavioral1
Sample
4fe6e2ab5c298167e0eaa2b01ecf653e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4fe6e2ab5c298167e0eaa2b01ecf653e.exe
Resource
win10v2004-20231222-en
General
-
Target
4fe6e2ab5c298167e0eaa2b01ecf653e
-
Size
10KB
-
MD5
4fe6e2ab5c298167e0eaa2b01ecf653e
-
SHA1
e21ad0682c6c37d5e961fa87000a48c3c22d0729
-
SHA256
f807659cb2b6a49c2529d29fa60c6ec6517a625aea44c8f4de891df9e3488a9b
-
SHA512
d4ab097fd3008e7e0830a553b5b44918a37ae86542b4d0910d32d3ddc105f95dc0a1306dc95d51c30001dd5cc00234e70361b4ac42739bf2e8924fb5b3393b75
-
SSDEEP
192:n9r6KjIJNyAJVmuXOWFaNJhLkwcud2DH9VwGfctWYhN:JTYtJNXOCaNJawcudoD7UY4N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fe6e2ab5c298167e0eaa2b01ecf653e
Files
-
4fe6e2ab5c298167e0eaa2b01ecf653e.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE