Behavioral task
behavioral1
Sample
54d6fa9beb67b5da05c3be5877b5af13b2f5334d159bd109690a2dc3ca0fd996.exe
Resource
win7-20230831-en
General
-
Target
54d6fa9beb67b5da05c3be5877b5af13b2f5334d159bd109690a2dc3ca0fd996
-
Size
15.5MB
-
MD5
e30a8ddec65f3f787ebd0be8fdd05874
-
SHA1
7c8cf0237f69ea3f6264e170961f1a6cad47af7c
-
SHA256
54d6fa9beb67b5da05c3be5877b5af13b2f5334d159bd109690a2dc3ca0fd996
-
SHA512
ddddad13bd09ab3ef9a9634455e4c8e25c8ead4e79cce774002bda0327eefdfa399892a751cafe70dbf8f604d022f136427e18d46089a63c5fe2fc02f4b759cc
-
SSDEEP
393216:GLmzIVLC0+y+uTKFyOiu9N9b4jdArRYbe5sDHsqjZU:GyGVQgdAmbeyDHsc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54d6fa9beb67b5da05c3be5877b5af13b2f5334d159bd109690a2dc3ca0fd996
Files
-
54d6fa9beb67b5da05c3be5877b5af13b2f5334d159bd109690a2dc3ca0fd996.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15.5MB - Virtual size: 15.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE