Behavioral task
behavioral1
Sample
5c0c2f0692905698a4521e0a527d9ae55ccb3364adfd94606fdc43a74f602890.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5c0c2f0692905698a4521e0a527d9ae55ccb3364adfd94606fdc43a74f602890.exe
Resource
win10v2004-20230915-en
General
-
Target
5c0c2f0692905698a4521e0a527d9ae55ccb3364adfd94606fdc43a74f602890
-
Size
581KB
-
MD5
d0d5c55f424a8535f1ca77241053b9d8
-
SHA1
fc9c1ebb2830f413383ec060506cea77c4ec767c
-
SHA256
5c0c2f0692905698a4521e0a527d9ae55ccb3364adfd94606fdc43a74f602890
-
SHA512
98b29b7b352fd9c6d4ce6a2e0f1f3e73501a78b38903d2a29a7bf5043d2b9c2adf0932f54ce2d0b06d9da2bb21369f4164ba87699a23c0d75406b6974b469dfc
-
SSDEEP
12288:Q28y5wrgYZrQi3DRyGYhrDG0fh6sKs8nO4fZTtS8dToO3G3k0eoS:QM5wEYZtTUGYE0foMboZItOW3k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c0c2f0692905698a4521e0a527d9ae55ccb3364adfd94606fdc43a74f602890
Files
-
5c0c2f0692905698a4521e0a527d9ae55ccb3364adfd94606fdc43a74f602890.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 571KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE