Behavioral task
behavioral1
Sample
4680c898865c92c688ecdae3c5c8afc8dd28d46138d4315896284fd6fd52d6d6.exe
Resource
win7-20240704-en
General
-
Target
4680c898865c92c688ecdae3c5c8afc8dd28d46138d4315896284fd6fd52d6d6
-
Size
2.5MB
-
MD5
7c188f6477436468ff4d0a3f25d260ed
-
SHA1
35c1d0ccd28e481eeb583d186f9ad060b36c3814
-
SHA256
4680c898865c92c688ecdae3c5c8afc8dd28d46138d4315896284fd6fd52d6d6
-
SHA512
489996ae2b5ccc90681e0f2e8d319efa32339cefdacb5f002c5644de6c427fe13871aa6292bc05861e48839c350a6b2257b40a619bde74eec5e754c70d65baae
-
SSDEEP
49152:6sUGJaK2iwi0F7/1CndypmgOOi6YJVPNwR8KdodmbEAwuk:fVoKGD/WrgO36+wR8KdoMKuk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4680c898865c92c688ecdae3c5c8afc8dd28d46138d4315896284fd6fd52d6d6
Files
-
4680c898865c92c688ecdae3c5c8afc8dd28d46138d4315896284fd6fd52d6d6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE