Behavioral task
behavioral1
Sample
4cf85df83d6ed8b842ff59b0a9c70d1d8b0f5ddb092f7d407c1f1b28c17e8675.exe
Resource
win7-20240221-en
General
-
Target
4cf85df83d6ed8b842ff59b0a9c70d1d8b0f5ddb092f7d407c1f1b28c17e8675
-
Size
327KB
-
MD5
1a92253c80257129d57f0ad7d44e9fff
-
SHA1
f820e7068ae0d52b7eb7058e2cb5eafacd44d3fa
-
SHA256
4cf85df83d6ed8b842ff59b0a9c70d1d8b0f5ddb092f7d407c1f1b28c17e8675
-
SHA512
e93ad3dff931313d3952de0aa5f1a456233a1502cc33819a8513a9c5a6dd9665f9e6df1805820ecdd457a7adfb13d04cef5a37ba6a7c5ca54b83df4967f8c412
-
SSDEEP
6144:9cm4FmowdHoS4BftapTs8Hoo+6MjTVhRDWwK:/4wFHoS4d0G8HoljTVhRDWwK
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cf85df83d6ed8b842ff59b0a9c70d1d8b0f5ddb092f7d407c1f1b28c17e8675
Files
-
4cf85df83d6ed8b842ff59b0a9c70d1d8b0f5ddb092f7d407c1f1b28c17e8675.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE