Behavioral task
behavioral1
Sample
5bc784bf6a5665e22c99f8b78b87ac80.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bc784bf6a5665e22c99f8b78b87ac80.exe
Resource
win10v2004-20231215-en
General
-
Target
5bc784bf6a5665e22c99f8b78b87ac80
-
Size
133KB
-
MD5
5bc784bf6a5665e22c99f8b78b87ac80
-
SHA1
212260dedeb8fe1ef9fe7a4295aca3d95747a54b
-
SHA256
b822d05d14def89dc0a7f3e7d1322140cdad59ac7281468e7ed737f7e33084cf
-
SHA512
967ec76393a03c8ab4fbc7f9aafd7f5958aa27fd60ea5b754fad4fcb69de388538e15e142b5cde0c81b840f223f8ef6828ed9f707e37d62a635f86dfd9dafcf6
-
SSDEEP
3072:flGWMVA0jGIleKylCXQTlnDnuEHF7jhB8fQ:96VA0G2eKy0ATx/xjhB8fQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bc784bf6a5665e22c99f8b78b87ac80
Files
-
5bc784bf6a5665e22c99f8b78b87ac80.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE