Behavioral task
behavioral1
Sample
54dc63285c084df3346913c9381108bd.exe
Resource
win7-20231215-en
General
-
Target
54dc63285c084df3346913c9381108bd
-
Size
593KB
-
MD5
54dc63285c084df3346913c9381108bd
-
SHA1
800a9cd9fbae7cc98719a5ad4389518bc325e00e
-
SHA256
51cf9f445b089a68da64fad888c061c28e0c5c386b3623842f622f51937d57ea
-
SHA512
915aaacf06aeca2195c442b04e7a5f5a4eb2a58f65fd3f0a9ac5f4c8af5bb95895a0bbecce1c2f28f4d6667b46c90beb792920ba3d9b80894b584c4a3c1e9690
-
SSDEEP
12288:i0sqiU66jnyyhY7+E+KgAWvT3spThkiR/CfvXkTc/lEscPUAi6TWH:i7CDKvhqiRufkTMl1cP06TWH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54dc63285c084df3346913c9381108bd
Files
-
54dc63285c084df3346913c9381108bd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 564KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 559KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE