Behavioral task
behavioral1
Sample
5077b165d88739d7b9749a1fb432a83a.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
5077b165d88739d7b9749a1fb432a83a.exe
Resource
win10v2004-20231201-en
General
-
Target
5077b165d88739d7b9749a1fb432a83a
-
Size
784KB
-
MD5
5077b165d88739d7b9749a1fb432a83a
-
SHA1
115d00d8806e0d789a9a2106005a78883ddd8f43
-
SHA256
6a070be758092add4c34416e02a5221189c21094044ada5797b9a3446d63e1f1
-
SHA512
c8332e2b971fe45af7585fd86dbc78ef137b49838a58e4dbcdf09ef9aeba76dc8122ccff516025a2f44abfe0963477a7027142d27669c68e74457f5df91c3199
-
SSDEEP
24576:HFBv5E2oUKyc/08RV2zqYFhRGju4SMryuw:HFBvBo9/3RVUZLu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5077b165d88739d7b9749a1fb432a83a
Files
-
5077b165d88739d7b9749a1fb432a83a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE