Behavioral task
behavioral1
Sample
5fcc0daa37146e5e47a2af57f635b1eb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5fcc0daa37146e5e47a2af57f635b1eb.exe
Resource
win10v2004-20231215-en
General
-
Target
5fcc0daa37146e5e47a2af57f635b1eb
-
Size
7.8MB
-
MD5
5fcc0daa37146e5e47a2af57f635b1eb
-
SHA1
9b585fdb1b4b052275a916aa969a592a3a31b656
-
SHA256
a5ab1ab1c6580c6d93579bd57b5c2f004d18f19b797416eefeb9844ae07d93be
-
SHA512
4d7c7481105cef8c4ca23e372acaa03dcaa95498001009251ddc74deb7164a2c611d2cef5240367fa99da0df24c61b92a821a4ca00ae4789431eea1072d38cd9
-
SSDEEP
196608:7cyj7dlirFr7vdlir9L2urdlirFr7vdlir9Pk18+QdlirFr7vdlir9L2urdlirFe:7c/WPoMkamWPo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fcc0daa37146e5e47a2af57f635b1eb
Files
-
5fcc0daa37146e5e47a2af57f635b1eb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE