Behavioral task
behavioral1
Sample
5d7cbf6ec8cbd3bf46afe063f6e26a72.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5d7cbf6ec8cbd3bf46afe063f6e26a72.exe
Resource
win10v2004-20231215-en
General
-
Target
5d7cbf6ec8cbd3bf46afe063f6e26a72
-
Size
5.8MB
-
MD5
5d7cbf6ec8cbd3bf46afe063f6e26a72
-
SHA1
3ac29e26e01a980afad005805abbbe9c48914a9c
-
SHA256
f558ef55f01c46208e1c1ee7569610d2b7b2f68ad886990938694de4aed62285
-
SHA512
d684c816e8c8104ce37026edb805d4072624957ab172e0761ceaa03321c4cab56b34773ebd0877b58c3de5651930d7cced0d2028dc9fc9454a5f08c20c31b129
-
SSDEEP
98304:9ZpqOAUuma7TEDgg3gnl/IVUs1jePslNc50yzx/oLkgg3gnl/IVUs1jePs:9ZpqSiQgl/iBiPu+x/oLwgl/iBiP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d7cbf6ec8cbd3bf46afe063f6e26a72
Files
-
5d7cbf6ec8cbd3bf46afe063f6e26a72.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE