Behavioral task
behavioral1
Sample
55d99984bbe39e60cda2f0fd3470d901.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
55d99984bbe39e60cda2f0fd3470d901.exe
Resource
win10v2004-20231215-en
General
-
Target
55d99984bbe39e60cda2f0fd3470d901
-
Size
10.2MB
-
MD5
55d99984bbe39e60cda2f0fd3470d901
-
SHA1
8eb3fdf9b1a9782c0656d99b854d09387947ca83
-
SHA256
e52cf670f0e5c2e2d221338ac6b4af389d84426caf02672876f0e386fc83bf1a
-
SHA512
9a37aa3254edda369043e8cb99d1bedcb6a11f4ab60716bff2d87ed4446a3dfbb880f2d733117e2c14d1dce25edde1b9a7efd31302c08bab96e492550afb27cf
-
SSDEEP
98304:+I+YPRScl3hZiV52ul+WlIcwUCOIe31e7AXwYXyPJlS3hZiV52ul+WlIcwUCOIe3:+I+GdViTp+QCOZF3CPQiTp+QCO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55d99984bbe39e60cda2f0fd3470d901
Files
-
55d99984bbe39e60cda2f0fd3470d901.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE