Behavioral task
behavioral1
Sample
053b1a8015ea87b81e9cdd8066d5c0c3c258225e77dea6eb0edad742ce820ebd.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
053b1a8015ea87b81e9cdd8066d5c0c3c258225e77dea6eb0edad742ce820ebd.exe
Resource
win10v2004-20231023-en
General
-
Target
053b1a8015ea87b81e9cdd8066d5c0c3c258225e77dea6eb0edad742ce820ebd
-
Size
534KB
-
MD5
54f12b72bde2553dce2d33a9d13b1c58
-
SHA1
01a30def46e087e672daf626832e9ed227aaf9ef
-
SHA256
053b1a8015ea87b81e9cdd8066d5c0c3c258225e77dea6eb0edad742ce820ebd
-
SHA512
9248379c9b93035ed7f925f760aa98a4192593ad232f4388075e727be3f46b8066c79d297158b149aa1f54721471a41c4901cf4f65d7841391c9ab29e68873b3
-
SSDEEP
12288:LGKWA3ioaEGe4Pbm/8uksHPGVZKTYXh+UDwO6CD5E/oS:ifA3LaJe4i/8ukwkZWzU8PCVE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 053b1a8015ea87b81e9cdd8066d5c0c3c258225e77dea6eb0edad742ce820ebd
Files
-
053b1a8015ea87b81e9cdd8066d5c0c3c258225e77dea6eb0edad742ce820ebd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 519KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE