Behavioral task
behavioral1
Sample
54333588ee085644918b374ed894ad18.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
54333588ee085644918b374ed894ad18.exe
Resource
win10v2004-20231215-en
General
-
Target
54333588ee085644918b374ed894ad18
-
Size
313KB
-
MD5
54333588ee085644918b374ed894ad18
-
SHA1
8ea0595805e9b8e4f93e3df773e11743509772d8
-
SHA256
aa13ed706ad5b02ef102ade2614248743518115f5a1aecfdac5484bc373cc5b3
-
SHA512
332dfbaaddf030081e87fde75cb6d3f14c9be640588be90a8e3f50bf55dc2ca0df45782f0f7f13c743d0f563707cb3e64b3021b947cbd3e44547ecb3e4f31b1c
-
SSDEEP
6144:RZb+bSFc91uJXNG3LEmozY6RrAMWsNCDhGnncGHPGz6MTumyc9Uv8Y0GQaYoS:USFFQ6dWs0ucRYM1GQ/oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54333588ee085644918b374ed894ad18
Files
-
54333588ee085644918b374ed894ad18.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 560KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 310KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE