Behavioral task
behavioral1
Sample
543fa57d8986c51a78109d7641a45637.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
543fa57d8986c51a78109d7641a45637.exe
Resource
win10v2004-20231215-en
General
-
Target
543fa57d8986c51a78109d7641a45637
-
Size
266KB
-
MD5
543fa57d8986c51a78109d7641a45637
-
SHA1
8b23b9331e2195426b8b427868fc19dc163b815b
-
SHA256
60e8974cd1168b928a60403ab09102fb5f28f343be773651ede6d91973615d9c
-
SHA512
45e3aa3c2d30c0730adcf973a48060408c9fdb7bfe0ffee4f0882cdabdacedf9f9441668df2378203e3bc84dca80ca737daa2e1874983720950931f02ffe2cd9
-
SSDEEP
6144:lRIzjXW51Pa36lzLRJ2IC/K/NQ4ps7bzLox7bE01WxrcqNQ:lRIzS7aqRFJ2ICWN5DJf1Wxcqi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 543fa57d8986c51a78109d7641a45637
Files
-
543fa57d8986c51a78109d7641a45637.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE