Behavioral task
behavioral1
Sample
c5f1fcc5c12b44b7705f5140794091d2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c5f1fcc5c12b44b7705f5140794091d2.exe
Resource
win10v2004-20231215-en
General
-
Target
c5f1fcc5c12b44b7705f5140794091d2
-
Size
5.3MB
-
MD5
c5f1fcc5c12b44b7705f5140794091d2
-
SHA1
70b3979b14706998955b51831e6cc8f441217a6b
-
SHA256
ede864f49d024f35c417e7c24806cd26bbec48a6d211427ebe2b2783d87d4d18
-
SHA512
9e53da4d10ed61056b7853e049e1a213e83cb99797949a3f91cd2338e75eb78fa3f39e224979828f8b869fb44bbf7221cdab18f5e4b809d8cb574e93d74796a3
-
SSDEEP
98304:hN0Y9i0yU2cx4HktBcwQDM2YIDULH8028Uj9h5dnrpFfXHktBcwQDM2YIDULHt:r0Yd34schDHIx2/xdnrbschDHIN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5f1fcc5c12b44b7705f5140794091d2
Files
-
c5f1fcc5c12b44b7705f5140794091d2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE