Behavioral task
behavioral1
Sample
5cdc7025aa4c236ba293944e1cb57d64bd98950ad5efe51b598a729660fbb3e6.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5cdc7025aa4c236ba293944e1cb57d64bd98950ad5efe51b598a729660fbb3e6.exe
Resource
win10v2004-20230703-en
General
-
Target
5cdc7025aa4c236ba293944e1cb57d64bd98950ad5efe51b598a729660fbb3e6
-
Size
93KB
-
MD5
1607708067ad385538d4861930c2555a
-
SHA1
c53296a93297216b28122d81ff72586c489b0e3b
-
SHA256
5cdc7025aa4c236ba293944e1cb57d64bd98950ad5efe51b598a729660fbb3e6
-
SHA512
af8114b6b2e7b4f9c565ee2a9931b482c58996bbd58f64c8737638c3135b5b24b2f9d2b53b7d42495846c88b685345f595c36de5e3d689987fecc59e3d031144
-
SSDEEP
1536:zuHpiTb/nouy8/jefcKUi+beFek+3jXQXkQPeKl1xC:zuJ0bvout/yfc8eljXiP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cdc7025aa4c236ba293944e1cb57d64bd98950ad5efe51b598a729660fbb3e6
Files
-
5cdc7025aa4c236ba293944e1cb57d64bd98950ad5efe51b598a729660fbb3e6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE