Behavioral task
behavioral1
Sample
505967ebb5a4a4374a6894132ca3a0bc.exe
Resource
win7-20231215-en
General
-
Target
505967ebb5a4a4374a6894132ca3a0bc
-
Size
386KB
-
MD5
505967ebb5a4a4374a6894132ca3a0bc
-
SHA1
a42517e53e636854e4c93996d3892b6a39cbb911
-
SHA256
3e034c842475b4b1dae22c0054e4f3a3f42133e266e52a00b5e67702bb07c8d1
-
SHA512
0e0e1aa5fba8cb20c693b6fc86e3c640bb8e7a161b6a837301938806e4ed1c64a9f90bd4338ef46be75a349ea6beee4fd6f067aab12fcbb6d1ee9948c925c849
-
SSDEEP
6144:rhJhWT3UEIA1CqzU75aDdrTPbNZAXdPRh2IQLtL2yy02V3IGcIFoSe8OIo:rzhGqAQqzU7GrTzNZeNAl2yy9BoSZOIo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 505967ebb5a4a4374a6894132ca3a0bc
Files
-
505967ebb5a4a4374a6894132ca3a0bc.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE