Behavioral task
behavioral1
Sample
5c968c8c2ed661fed234b01c28da534d3987a8b54dc999c455db4f398f52d498.exe
Resource
win7-20230831-en
General
-
Target
5c968c8c2ed661fed234b01c28da534d3987a8b54dc999c455db4f398f52d498
-
Size
286KB
-
MD5
b52fc4f12d9e52af2f391caca8406c27
-
SHA1
0b5259c76cd9d8982094d5b7c7877c1c5a7b5380
-
SHA256
5c968c8c2ed661fed234b01c28da534d3987a8b54dc999c455db4f398f52d498
-
SHA512
823f2b3667a37f04fc795af14e2e78eb192899044b1ab89717e451a270c845011042aef243744b10e57086c3407ab2d80351255e76b1881b94ff4407467befb0
-
SSDEEP
6144:kOhrWAxNXmgkqfaRYes4zO7UpkzsSuX3/29AHgfcBBt0uJxLROd+oS:kEWA/VE1sOcUpUpkvXA8f0eR++oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c968c8c2ed661fed234b01c28da534d3987a8b54dc999c455db4f398f52d498
Files
-
5c968c8c2ed661fed234b01c28da534d3987a8b54dc999c455db4f398f52d498.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 580KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 267KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE