Behavioral task
behavioral1
Sample
04ee9b973e52a0a780cefd71eb964ad86001a1a1319484b00f61fbf9aebcbacf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
04ee9b973e52a0a780cefd71eb964ad86001a1a1319484b00f61fbf9aebcbacf.exe
Resource
win10v2004-20240226-en
General
-
Target
04ee9b973e52a0a780cefd71eb964ad86001a1a1319484b00f61fbf9aebcbacf
-
Size
632KB
-
MD5
a428b45de393ff994563cee93b758d7e
-
SHA1
9202eb9f586650b588eea6a781bb5ab428b604c7
-
SHA256
04ee9b973e52a0a780cefd71eb964ad86001a1a1319484b00f61fbf9aebcbacf
-
SHA512
b71ea4fa54d74eae7a438b3e6678a08813072870e34cf27e7270b051c875eb03c9ab33b576f0a365a45f3e2067b99ff0d6d3a6e2171f28a9873b6de0701b91bd
-
SSDEEP
12288:HlqhYw8onEmxx+AObUzlG5G1Iavg2uJJCmpNy4MiW8AOU5OVCyo:H4hYIZzlMTgg2uJcmpNy4L/PU5Ono
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04ee9b973e52a0a780cefd71eb964ad86001a1a1319484b00f61fbf9aebcbacf
Files
-
04ee9b973e52a0a780cefd71eb964ad86001a1a1319484b00f61fbf9aebcbacf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zwt Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE