Behavioral task
behavioral1
Sample
4bc26f4ca53a35fea1296dabb988379d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4bc26f4ca53a35fea1296dabb988379d.exe
Resource
win10v2004-20240226-en
General
-
Target
4bc26f4ca53a35fea1296dabb988379d
-
Size
426KB
-
MD5
4bc26f4ca53a35fea1296dabb988379d
-
SHA1
aaa8dc29d56260abf794daba91e3f68bce03f403
-
SHA256
b8b889c8c80fb3d5605598df6ced656bda7d5ff0e96294ea065abcc050e12ff4
-
SHA512
a0d61e39782b3424cb66d87d43e0db14ab9cb6e6a99d4669df5b86dd4f746f1cc9e436053dd03b02ab54e5ecb6189963e9adf5eda7c48f7c71a979553c5304fe
-
SSDEEP
6144:R+tR0xayHidOX9qD5d4pGTQYkeMcpQRFKt9LQQzR5zpqb3x2BA9fIly+GrKA2uC+:RxLqOtutT3ffsoq9P+Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bc26f4ca53a35fea1296dabb988379d
Files
-
4bc26f4ca53a35fea1296dabb988379d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE