Behavioral task
behavioral1
Sample
4f8313b934e1a7a699d92dc0530541a0N.exe
Resource
win7-20240705-en
General
-
Target
4f8313b934e1a7a699d92dc0530541a0N.exe
-
Size
3.2MB
-
MD5
4f8313b934e1a7a699d92dc0530541a0
-
SHA1
e04454fc317f4c973733ed2a4fbfde75c424b3aa
-
SHA256
02d46470023d24409f32b06bcd8fb1e616d2c040aebf892eceae35196695ebab
-
SHA512
10e94f779d001cba22830a844865e2dad6a55af3fde58ef54b8ea286cb3da738efbc3f05f46aabb4b5520f4a337e3434d1d1cf9affaaa48c72102b331f5985c9
-
SSDEEP
98304:EiZWoUbPkGdV0SzXcakcvn+RyS+gr7cakcte8Bqqgcakcvn+RyS+gr7cakcO:jgzzkK0Udlvn+JX7dlte88qgdlvn+JXy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f8313b934e1a7a699d92dc0530541a0N.exe
Files
-
4f8313b934e1a7a699d92dc0530541a0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE