Behavioral task
behavioral1
Sample
4537aea9cb03cd36529dad15bbe118e17863a430b5ebc10cf8b9db4d8f8b113d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4537aea9cb03cd36529dad15bbe118e17863a430b5ebc10cf8b9db4d8f8b113d.exe
Resource
win10v2004-20240704-en
General
-
Target
4537aea9cb03cd36529dad15bbe118e17863a430b5ebc10cf8b9db4d8f8b113d.exe
-
Size
5.7MB
-
MD5
790e7a86d60b0a4818dad384f6751866
-
SHA1
5be7382029bed56834fc0a7c226d015161bbd6b6
-
SHA256
4537aea9cb03cd36529dad15bbe118e17863a430b5ebc10cf8b9db4d8f8b113d
-
SHA512
8dc2995b114df3974fc09f339ee6dae7089c30ccc1265e84b8c1c0ec0eabc2b0a02ab527f442ce943383e29fa7035367d1b3afb99464267431794b02393176c5
-
SSDEEP
98304:wUE6IQyyY1P5jKSt1bvhId4oPl/+NYiVtiLGwPXIm6PDLRvfvunQ9GNuOYp:wUbIQDSPFKStlE4APqtizPv6nRWnQ9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4537aea9cb03cd36529dad15bbe118e17863a430b5ebc10cf8b9db4d8f8b113d.exe
Files
-
4537aea9cb03cd36529dad15bbe118e17863a430b5ebc10cf8b9db4d8f8b113d.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 10.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE