Behavioral task
behavioral1
Sample
4f697867d1a5de73074471ee2faff9ab3c3e5bff5efa8eb1017dd3f8c12f9132.exe
Resource
win7-20240221-en
General
-
Target
4f697867d1a5de73074471ee2faff9ab3c3e5bff5efa8eb1017dd3f8c12f9132
-
Size
4.8MB
-
MD5
74fb64576facf8d100c6bc4e0106624e
-
SHA1
c555302d9bbe5de5bf1f93fcb6933c0e01f1d257
-
SHA256
4f697867d1a5de73074471ee2faff9ab3c3e5bff5efa8eb1017dd3f8c12f9132
-
SHA512
0eb221790b7e50b9ba441cbe74068abbf8502f0a745cbb50dddc1030019524ac72cce1a139bf5b2c233d4b9a8db85aa4dc99f11220491d9bc114dbea30284ad6
-
SSDEEP
98304:BnTQ1u4sWhmKH0j+wFyra4m5Yzy57pG6fTjRjz/gehMN+dzjvv:BnTh4skmKHU+Za1H57zp/ghEzjvv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f697867d1a5de73074471ee2faff9ab3c3e5bff5efa8eb1017dd3f8c12f9132
Files
-
4f697867d1a5de73074471ee2faff9ab3c3e5bff5efa8eb1017dd3f8c12f9132.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 580KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE