Behavioral task
behavioral1
Sample
54c5c80feb168f0467abce04320f66f0.exe
Resource
win7-20231129-en
General
-
Target
54c5c80feb168f0467abce04320f66f0
-
Size
1.2MB
-
MD5
54c5c80feb168f0467abce04320f66f0
-
SHA1
fb0700efb7af24832414d6125d91b06a6b8112d5
-
SHA256
155577e2a22b5a604bbc54c4e5e18567676171e69b87524c578696ba8a69bb83
-
SHA512
b700bbe4ebfddb319e4c254bd60a0bba3612f94018caf7dd81c9d0e403fa3ed074077e5982176431222c849d8c5795e0ad3d7ceaefb418958fd8d8f79ba3c9ec
-
SSDEEP
24576:xav/F4OqPxtgHlO82wtGKAoKtijtaH5SlHTKCU5bNa1w6ZbOkjW2kySL:xavNxqpWR2w7jja5guXJmbHK2z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54c5c80feb168f0467abce04320f66f0
Files
-
54c5c80feb168f0467abce04320f66f0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE