Behavioral task
behavioral1
Sample
0550dc3b33f4d20057ef74fbdb1dfb10b84b148052aec5f3f1e8dc420f23c193.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
0550dc3b33f4d20057ef74fbdb1dfb10b84b148052aec5f3f1e8dc420f23c193.exe
Resource
win10v2004-20231130-en
General
-
Target
0550dc3b33f4d20057ef74fbdb1dfb10b84b148052aec5f3f1e8dc420f23c193
-
Size
5.9MB
-
MD5
4eafb9aff2390fc07189395ed6ba2d59
-
SHA1
4e0824bd68ca259d13c1bf857d4be28bc489ddb5
-
SHA256
0550dc3b33f4d20057ef74fbdb1dfb10b84b148052aec5f3f1e8dc420f23c193
-
SHA512
72cf032f3da448fc20d65dd9c8e0c8dd68d61915ee2f951f6bea3891be24599c8948dd90ffee366aebd5eb2612eef6acdf3c633bc70580f6837883587929a818
-
SSDEEP
98304:2jTyUPCIfq5MezMD/x/0feyGg8Q940BDlgwdnpka9R/k9t+2sEO3Gt+7SuxMQm:2C5h5MHDfyGg8wBdnpkYRMOEOpPM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0550dc3b33f4d20057ef74fbdb1dfb10b84b148052aec5f3f1e8dc420f23c193
Files
-
0550dc3b33f4d20057ef74fbdb1dfb10b84b148052aec5f3f1e8dc420f23c193.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
main.pyc