Behavioral task
behavioral1
Sample
5cfa93531a095e42636150b69c18b400.exe
Resource
win7-20231215-en
General
-
Target
5cfa93531a095e42636150b69c18b400
-
Size
784KB
-
MD5
5cfa93531a095e42636150b69c18b400
-
SHA1
61719e051673aacf94bf61f6e7da02fa70b33f86
-
SHA256
c29b0764361655ffda527281a1e4d9e35b7e481a174cea8b63a5f4eabaf732f7
-
SHA512
18226902181a37b7e04ea1f5b349d10d41dc67e18857691c3a14e8ab08e0190a515f1e67dac23db5d8175f500ea2fc5076e6bfd91eb15cba7c67d90470afe787
-
SSDEEP
24576:unH5xjnZoyrcm7a9FnX2Xrht6gR3BxKff6jd4:uZJnZoccm7aqXP6EYi4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cfa93531a095e42636150b69c18b400
Files
-
5cfa93531a095e42636150b69c18b400.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE