Behavioral task
behavioral1
Sample
4ffc5e309767289a044d37b1a8398527.exe
Resource
win7-20231215-en
General
-
Target
4ffc5e309767289a044d37b1a8398527
-
Size
784KB
-
MD5
4ffc5e309767289a044d37b1a8398527
-
SHA1
8e07b7af754a22f9c8539cb2e05bc121cf79aa68
-
SHA256
bb631d04677afb575a07b7ca644f341f0438e14f367d221f54295a2a6beb4014
-
SHA512
5407e97d0c560dd584d310fd3187958b7ba115ff6413226d1e460cc3cd45b5e77ad8ac272f40ea52e13337a810b4db16bfb99acdf64aa5ce7e88027fcd27f402
-
SSDEEP
24576:UFJ8+5UD9OwqIMdypWefszwueM5mt7x8kck1:U8LqIMdypWMszwueOmtCxk1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ffc5e309767289a044d37b1a8398527
Files
-
4ffc5e309767289a044d37b1a8398527.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE