Behavioral task
behavioral1
Sample
4e08a6f256d338d8258886b6c0f38c7acc287d7a97a8ff5e4b9b775302577983.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4e08a6f256d338d8258886b6c0f38c7acc287d7a97a8ff5e4b9b775302577983.exe
Resource
win10v2004-20240426-en
General
-
Target
4e08a6f256d338d8258886b6c0f38c7acc287d7a97a8ff5e4b9b775302577983
-
Size
2.5MB
-
MD5
4047c26682f0e966cdc9b286628fe64f
-
SHA1
1eaef5396ca4e8a75c115df94e7024674dcba524
-
SHA256
4e08a6f256d338d8258886b6c0f38c7acc287d7a97a8ff5e4b9b775302577983
-
SHA512
fd6abbc69cfb5843b2c656e16173f107c9e99b713d1a2a3aa43f4b4802a1c0a36120aad92abbef96c9a83e1e986f9c8af2ab4bc599f72843d6bd87e6bbb36659
-
SSDEEP
49152:AYarZLvmpQK0ZteAuQ5muY1yygR1/wv1kVk5rHulks:AYULvmpQqAuQsuY1yygR1/wvQklsks
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e08a6f256d338d8258886b6c0f38c7acc287d7a97a8ff5e4b9b775302577983
Files
-
4e08a6f256d338d8258886b6c0f38c7acc287d7a97a8ff5e4b9b775302577983.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE