Behavioral task
behavioral1
Sample
c4a6f48d14f4e1ce1da05759a5c4ea10N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c4a6f48d14f4e1ce1da05759a5c4ea10N.exe
Resource
win10v2004-20240802-en
General
-
Target
c4a6f48d14f4e1ce1da05759a5c4ea10N
-
Size
91KB
-
MD5
c4a6f48d14f4e1ce1da05759a5c4ea10
-
SHA1
ce8f5273fdebc6be3ea37a00da109f1df8d08a92
-
SHA256
c7e94c05020eb15e0caa91d8b523ecc0e5eaea0403d6e5a7e876975f731cebc5
-
SHA512
9e2fbb41de775ae11a6700e761c8f6f3e53006ac7b857de6bb0a312940bd639d9ec7a34fe2e766f4b1172c7da9bfb8dfa93e90cce577e57e02bf76d0c91a11d5
-
SSDEEP
1536:XRsjdLaslqdBXvTUL0Hnouy8VjkRsjdLaslqdBXvTUL0Hnouy8VjK:XOJKqsout9kOJKqsout9K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4a6f48d14f4e1ce1da05759a5c4ea10N
Files
-
c4a6f48d14f4e1ce1da05759a5c4ea10N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE