Behavioral task
behavioral1
Sample
4e5a62a16e38cb84ad3b9ff7488b3f85348a7afad4945f11133a416890f6479d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4e5a62a16e38cb84ad3b9ff7488b3f85348a7afad4945f11133a416890f6479d.exe
Resource
win10v2004-20240426-en
General
-
Target
4e5a62a16e38cb84ad3b9ff7488b3f85348a7afad4945f11133a416890f6479d
-
Size
2.5MB
-
MD5
1e0a293c5d9d24882e2af3b0d9d419c5
-
SHA1
7fa09aa3ceef80674587b91ec42308ea06919754
-
SHA256
4e5a62a16e38cb84ad3b9ff7488b3f85348a7afad4945f11133a416890f6479d
-
SHA512
890c8a4c0d6d2b37a4804b6a41f1f836e52af5a9592f1460a64ce8f39c93af6db46271c1e72d648a93e96078ee6b438a83119ffcd1c66edb7012b37c956f0dde
-
SSDEEP
24576:QaBNQ8df1L8r2WR49RbKxyf7KN8GAucYW+qRK2JP99iF9vfQga4uWvTQk3EfPpRN:QaTBdfZ8r2Wo53obAuQPufvfoZzkA8kZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e5a62a16e38cb84ad3b9ff7488b3f85348a7afad4945f11133a416890f6479d
Files
-
4e5a62a16e38cb84ad3b9ff7488b3f85348a7afad4945f11133a416890f6479d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE