Behavioral task
behavioral1
Sample
4cbc4194dcf54b3862947498b557ca69ac5418f1a3a4df2ade492cfc33a6cdadN.exe
Resource
win7-20240903-en
General
-
Target
4cbc4194dcf54b3862947498b557ca69ac5418f1a3a4df2ade492cfc33a6cdadN
-
Size
252KB
-
MD5
67c0cf5fb1815c025e8136a885e0e870
-
SHA1
5596153e12818c897d87d68fda6d132ed17b1840
-
SHA256
4cbc4194dcf54b3862947498b557ca69ac5418f1a3a4df2ade492cfc33a6cdad
-
SHA512
3d600c0a2cb1cd68267439c42aedbd32552a66e66d35e6c5e2d9c642f3a8c0f1ed163dd63fade26e4fbdd6af34bb5d5f784a3fe09386aaf57c5f216875a70839
-
SSDEEP
6144:kcm4FmowdHoSphraHcpOaKHpolTjZXvEQo9dfBP/5:y4wFHoS3eFaKHpKT9XvEhdfBP/5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cbc4194dcf54b3862947498b557ca69ac5418f1a3a4df2ade492cfc33a6cdadN
Files
-
4cbc4194dcf54b3862947498b557ca69ac5418f1a3a4df2ade492cfc33a6cdadN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE