Behavioral task
behavioral1
Sample
4f15d4e5be4fbf9a2ab1a4090afb20d84a59c3179ed07c480f84a40dcc3cd8ae.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4f15d4e5be4fbf9a2ab1a4090afb20d84a59c3179ed07c480f84a40dcc3cd8ae.exe
Resource
win10v2004-20240802-en
General
-
Target
4f15d4e5be4fbf9a2ab1a4090afb20d84a59c3179ed07c480f84a40dcc3cd8ae
-
Size
57KB
-
MD5
4028102c3cdf26acedea2046a76d1ad3
-
SHA1
a04c0380b60073268417b72a0aed3295e0ea5b66
-
SHA256
4f15d4e5be4fbf9a2ab1a4090afb20d84a59c3179ed07c480f84a40dcc3cd8ae
-
SHA512
0ef32f8649d83a35e0ac73f55f7f39725cf2b912856d70dd6b4039214b482016c96a41eff8b58cd1a388041c6388e16b46019578af5a2cdde51cf74f2ccc12da
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI97LjLNLjLK5AJx05AJxHO:V7Zf/FAxTWoJJ7T1vJvB6lbE6lbf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f15d4e5be4fbf9a2ab1a4090afb20d84a59c3179ed07c480f84a40dcc3cd8ae
Files
-
4f15d4e5be4fbf9a2ab1a4090afb20d84a59c3179ed07c480f84a40dcc3cd8ae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE