Behavioral task
behavioral1
Sample
4f97e02f2e901f846100d32c5690b69573e74cbdc821893cf3190418fe7bc431.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4f97e02f2e901f846100d32c5690b69573e74cbdc821893cf3190418fe7bc431.exe
Resource
win10v2004-20240226-en
General
-
Target
4f97e02f2e901f846100d32c5690b69573e74cbdc821893cf3190418fe7bc431
-
Size
60KB
-
MD5
615711b1cbdba5a196de49db34ff2622
-
SHA1
f335c37a803e3080acd80817a038ba2aa60445ea
-
SHA256
4f97e02f2e901f846100d32c5690b69573e74cbdc821893cf3190418fe7bc431
-
SHA512
e3fd074e5eff0b0737443ca7c974e4e5f57f904c2cbef00298356ed1cc09a38b30a8c597420f02ac58f4bcca6381faff8d89bd4c57eaff5536eeb15a8e5b1344
-
SSDEEP
1536:PlL9AgRqfGccceuIFYKXH2mgsRVTSNgymQ7Gh:dL9yeYeuoXdgf3mQ7Gh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f97e02f2e901f846100d32c5690b69573e74cbdc821893cf3190418fe7bc431
Files
-
4f97e02f2e901f846100d32c5690b69573e74cbdc821893cf3190418fe7bc431.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE