Behavioral task
behavioral1
Sample
5231f8c69dcb60fa5fb16d729b8db449.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5231f8c69dcb60fa5fb16d729b8db449.exe
Resource
win10v2004-20231215-en
General
-
Target
5231f8c69dcb60fa5fb16d729b8db449
-
Size
63KB
-
MD5
5231f8c69dcb60fa5fb16d729b8db449
-
SHA1
ef82568e085651d6a65ad301eaa4e6028fe7d5b9
-
SHA256
bc78782b4eb974e53d13d94ddecb749b489c83446ee1372581de606697cb7591
-
SHA512
d0927dbe20903a4507aa2246806913dd6028fb35a07d26866f81e9cef6aca48c09ce039ef3829eb5c889d6eeee589a1a0caccbdeca3807f33f413d5e2f29058e
-
SSDEEP
768:k/q9m/ZsybSg2ts4L3RLc/qjhsKmMJ0UtH/hY+JFfJcqfXlT/HIy:k/qk/Zdic/qjh8MJDH++vC6oy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5231f8c69dcb60fa5fb16d729b8db449
Files
-
5231f8c69dcb60fa5fb16d729b8db449.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE