Behavioral task
behavioral1
Sample
c5a20e38c86a36c155f048818e0bb67417c2f79aa71148dce0e2bfa550039f33.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c5a20e38c86a36c155f048818e0bb67417c2f79aa71148dce0e2bfa550039f33.exe
Resource
win10v2004-20230831-en
General
-
Target
c5a20e38c86a36c155f048818e0bb67417c2f79aa71148dce0e2bfa550039f33
-
Size
3.3MB
-
MD5
bac36fe4d8570d85f35b636af03003b8
-
SHA1
eb4745d49c3111ddf1ebc8f2aef8d5397845525c
-
SHA256
c5a20e38c86a36c155f048818e0bb67417c2f79aa71148dce0e2bfa550039f33
-
SHA512
c4edbdebc395d92b8c7706e1b9727fc1e795052d41ecf72630b4b75f16947050cab6eeaec59ba533e795e6565ca273f7ffb1b606917e0c23395e9e1a14b85c02
-
SSDEEP
49152:GxuPoFvezzX0aT2HoNfTS+s8KuqGaX0ToIBAUZLYr8T:GxuQFveXBCHoN1JBAUZLO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5a20e38c86a36c155f048818e0bb67417c2f79aa71148dce0e2bfa550039f33
Files
-
c5a20e38c86a36c155f048818e0bb67417c2f79aa71148dce0e2bfa550039f33.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE