Behavioral task
behavioral1
Sample
4eb63261714066b4a7be6d4692f4d7ea1a7a290250113e6497526e551e6d53ac.exe
Resource
win7-20231129-en
General
-
Target
4eb63261714066b4a7be6d4692f4d7ea1a7a290250113e6497526e551e6d53ac.exe
-
Size
4.6MB
-
MD5
39aed2889e0f48187fcae74bf1b1d997
-
SHA1
940f41ce3bb77948f37f66f69a8fa41ffd5bc67c
-
SHA256
4eb63261714066b4a7be6d4692f4d7ea1a7a290250113e6497526e551e6d53ac
-
SHA512
b4370806c9c80823dcf2b6512c31f0f53470c2c9470acb0a4287107969b5e43fbda4c271b2872d501e126acd6953a92b14fb4dff55302aa7ad13c47881160660
-
SSDEEP
98304:nWO6ATspaxEu6AYEVVy4W5/bDsvr9wg0MDLTa0PVy7G:WOeszpYE+V5/fsDep4VsG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4eb63261714066b4a7be6d4692f4d7ea1a7a290250113e6497526e551e6d53ac.exe
Files
-
4eb63261714066b4a7be6d4692f4d7ea1a7a290250113e6497526e551e6d53ac.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ