Behavioral task
behavioral1
Sample
5b93942465bff28e02ab3ea10ed41bdfaa8dca92eb9a32b45424693b5a453414.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5b93942465bff28e02ab3ea10ed41bdfaa8dca92eb9a32b45424693b5a453414.exe
Resource
win10v2004-20230703-en
General
-
Target
5b93942465bff28e02ab3ea10ed41bdfaa8dca92eb9a32b45424693b5a453414
-
Size
364KB
-
MD5
2bd9fc2608f0c06e7be8ca9ada2abad8
-
SHA1
da90b849a7ed5467abf2fa2fd8942d190e54a895
-
SHA256
5b93942465bff28e02ab3ea10ed41bdfaa8dca92eb9a32b45424693b5a453414
-
SHA512
e809b1106ce709b5daf80bd822952e328876a2ec78d2c5ebea9f3787ccfd2b4c217478878a22abae08b8b548020d95758c464deb66d039f59886cebf143907ee
-
SSDEEP
6144:BcsLzhTO6+VrSHRg6hoHYhXyJ8pJ6QIqV1ZHtrhq35BJqfpjS7w:WsLzxOlmxDMYhimf6xqV1ZHtkJBMxjM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b93942465bff28e02ab3ea10ed41bdfaa8dca92eb9a32b45424693b5a453414
Files
-
5b93942465bff28e02ab3ea10ed41bdfaa8dca92eb9a32b45424693b5a453414.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 73.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 334KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE