Behavioral task
behavioral1
Sample
4d6582e6bc1342bd734ce69c8467482b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4d6582e6bc1342bd734ce69c8467482b.exe
Resource
win10v2004-20240226-en
General
-
Target
4d6582e6bc1342bd734ce69c8467482b
-
Size
1.8MB
-
MD5
4d6582e6bc1342bd734ce69c8467482b
-
SHA1
4c70e5bb1d819fc3336203c1fa2f9307bae88aa3
-
SHA256
db192f884c5875b42c4f0abe4c865a9ecbd177b7e0cb65cdaa579f5e00e7d6c3
-
SHA512
f7d56df169ec2b14b568cbdd4ebef3d7e1de69a65d626bb0cd8d34cda9384ba8b4fc4dcb73ffc7ba510649c1f7c81d2669d990377cd1ec10b26021af592f343b
-
SSDEEP
49152:NxAHe5QMLxbuWetG1MiSmvfvrc0kQsTZUjPwyOL44hpmJM:Nxj5Db0tmN35kTT+joyOLFhaM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d6582e6bc1342bd734ce69c8467482b
Files
-
4d6582e6bc1342bd734ce69c8467482b.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB