Behavioral task
behavioral1
Sample
535b168969ce0c4d3cdb9a1d4e530c8c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
535b168969ce0c4d3cdb9a1d4e530c8c.exe
Resource
win10v2004-20231215-en
General
-
Target
535b168969ce0c4d3cdb9a1d4e530c8c
-
Size
1.5MB
-
MD5
535b168969ce0c4d3cdb9a1d4e530c8c
-
SHA1
7a4de92e945e26c5f28ad778bd273459c9da5415
-
SHA256
4012fa3b42ef1be42b07d8dd203ea157f0462fbb31bb53670f0190bf9a87292f
-
SHA512
33f4e0c2c73215f8eb418e32e2c4df45223c11c68c8a76caf074af4d34ff53ee30e2ab2664458badca9e5a1529ba318869aefabca163b5d97563058743ebfed4
-
SSDEEP
24576:pyXbUm1jEOeVWinPmogKthAOluA+nA3XO7YhE6lmKbTuiapGl9sPLRPi3ERFVlrn:pWbN1jEOViuT+AOlGt8hEExuxRPi3ERQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 535b168969ce0c4d3cdb9a1d4e530c8c
Files
-
535b168969ce0c4d3cdb9a1d4e530c8c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE