Behavioral task
behavioral1
Sample
4e0669ce2fb23956837938d498d3095c21373c4876eab6d36da1997a49075de9.exe
Resource
win7-20240704-en
General
-
Target
4e0669ce2fb23956837938d498d3095c21373c4876eab6d36da1997a49075de9
-
Size
785KB
-
MD5
3cf65084c1023b099c4acfa5e5c55ebd
-
SHA1
17a0d142030bbee2091e6b1a3c597a49582a6142
-
SHA256
4e0669ce2fb23956837938d498d3095c21373c4876eab6d36da1997a49075de9
-
SHA512
9431d5a3a51abec2598673f3fbdfc3673f21274de2bc7edaf1db6dc499af41e8feac2b5c7f11b309d1a515546a43bfd56e08dd22b24e088902a61286087cdf2c
-
SSDEEP
12288:+b0b+7x+ecmBzKYpFhjT5Pn7T9Ba49OcMWIAGZNL+QqTc4mV3kP+:+J7x+MpFhjTJn/9rV9MZNUgL37
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e0669ce2fb23956837938d498d3095c21373c4876eab6d36da1997a49075de9
Files
-
4e0669ce2fb23956837938d498d3095c21373c4876eab6d36da1997a49075de9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zbrz Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE