Behavioral task
behavioral1
Sample
506322b248ba2affa7a6ab425894cb89.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
506322b248ba2affa7a6ab425894cb89.exe
Resource
win10v2004-20231215-en
General
-
Target
506322b248ba2affa7a6ab425894cb89
-
Size
445KB
-
MD5
506322b248ba2affa7a6ab425894cb89
-
SHA1
4c643ce1b3b35c3e008fde754ec9f2847460d10b
-
SHA256
e0c0924e92cce2506cc80e10d7b15fcfed9098fc116e9d5b1bd11ebf9e40fd5c
-
SHA512
1c6a5f6129411a6317d558c23c6585c872099d61a50c0f0c8443f99d75fed60190ac21966a7a7dd3edc25155b38ea13fda74d91cb3c53eee28ed87030fb68202
-
SSDEEP
12288:Jg9fGRcNsy0+Vvph1TaExL9/0VIXH8O3yR0oDZilCy2:JqGR/y0+xpOmL+y8ZGeZPy2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 506322b248ba2affa7a6ab425894cb89
Files
-
506322b248ba2affa7a6ab425894cb89.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE