Behavioral task
behavioral1
Sample
4aeb93702ac62445c3588db0eed375ae637879024607a8ec8373b7ce30c0518c.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4aeb93702ac62445c3588db0eed375ae637879024607a8ec8373b7ce30c0518c.exe
Resource
win10v2004-20240709-en
General
-
Target
4aeb93702ac62445c3588db0eed375ae637879024607a8ec8373b7ce30c0518c
-
Size
54KB
-
MD5
e058e9696933016328ada1f6111c31d6
-
SHA1
a0b0c86d190e8f898d3a2065491253010da9a34d
-
SHA256
4aeb93702ac62445c3588db0eed375ae637879024607a8ec8373b7ce30c0518c
-
SHA512
a551807e5366d7f4ac45329f9fea9b5803a83d9a060bd1d477e6990da64e78f042bbca122fcc1298a23603361ad42f40b5d84c02042991e3fed9098cec3b8e2c
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBOTQbzjrY/+TQJ:V7Zf/FAxTWoJJZENTBQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4aeb93702ac62445c3588db0eed375ae637879024607a8ec8373b7ce30c0518c
Files
-
4aeb93702ac62445c3588db0eed375ae637879024607a8ec8373b7ce30c0518c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE