Behavioral task
behavioral1
Sample
4c21ebf50b38b36834bffd65a0d001efbe683c709c2ceb01108c5c06a6447879.exe
Resource
win7-20240903-en
General
-
Target
4c21ebf50b38b36834bffd65a0d001efbe683c709c2ceb01108c5c06a6447879
-
Size
16.0MB
-
MD5
1cf16085d2506b91ca30ae7d4ef557e1
-
SHA1
35d08d796a10956afc77c244212d86e645086e72
-
SHA256
4c21ebf50b38b36834bffd65a0d001efbe683c709c2ceb01108c5c06a6447879
-
SHA512
481a0fa0209165280069f918ac28c8ff9be623916e25c24af767233c7fdb4b027ae1833d3c90197251358047b1c2534e2a568f42d5b0f2107cf71a03a71ec1fa
-
SSDEEP
196608:++WSP3M2KUuzz3FHExZKCZtqC/qToKWUGNEoiN/A4sLru7JoE4CvXcmpMjPrBSvc:osMz3i3KCuC/+pGNv/i8Cvyx8M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c21ebf50b38b36834bffd65a0d001efbe683c709c2ceb01108c5c06a6447879
Files
-
4c21ebf50b38b36834bffd65a0d001efbe683c709c2ceb01108c5c06a6447879.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE