Behavioral task
behavioral1
Sample
5b6e4162cb3ae24c7d787e48a29230db9f628c0d94a46a82a94e8f8ab8d452d7.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5b6e4162cb3ae24c7d787e48a29230db9f628c0d94a46a82a94e8f8ab8d452d7.exe
Resource
win10v2004-20230831-en
General
-
Target
5b6e4162cb3ae24c7d787e48a29230db9f628c0d94a46a82a94e8f8ab8d452d7
-
Size
4.9MB
-
MD5
1635616c516eff683e691a335ceb8662
-
SHA1
6c6e833f73f67e2f63cd90cc85bafbf9d2825212
-
SHA256
5b6e4162cb3ae24c7d787e48a29230db9f628c0d94a46a82a94e8f8ab8d452d7
-
SHA512
bb751c5230f4e574798214162ac4d09fbc777dfb92c2673c9b1e4a71845e6b1fbc09e01b6eb97636125f769e908081fb03a7fc25e261f9666a9e066140d2dec3
-
SSDEEP
49152:EQWcu6884jW0WUtlB++o7fwmcxRaIh6MbnH71Dp4DRmUNHVEIeWC+s8KuqGaX0Tt:Ecu11G7fwmcxIIR1DpqUsEIhJBAUZLqi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b6e4162cb3ae24c7d787e48a29230db9f628c0d94a46a82a94e8f8ab8d452d7
Files
-
5b6e4162cb3ae24c7d787e48a29230db9f628c0d94a46a82a94e8f8ab8d452d7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE