Behavioral task
behavioral1
Sample
538e817960c249842844e5c44f6ffcdb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
538e817960c249842844e5c44f6ffcdb.exe
Resource
win10v2004-20231215-en
General
-
Target
538e817960c249842844e5c44f6ffcdb
-
Size
1.5MB
-
MD5
538e817960c249842844e5c44f6ffcdb
-
SHA1
0eb0b50db3fa033562d5cb0ff99435d9d4706539
-
SHA256
535d394a9a72c8ed909585e3fb85dd82b5c533e59e63609a1dc720cd610dee93
-
SHA512
b75176464bd52ce436414be4263f069a8fbad578d0887aa847c65f414257bfb72431bd28a5654110bc808bd57eb07ed8786822e1e2357c019e02f6aca74a96cb
-
SSDEEP
24576:6jHt5jtPcHh4moFsOZYm7P1g37/tj8VWMQK78w2mMd+4W:6B5KToFC37/tVBK7N2l
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 538e817960c249842844e5c44f6ffcdb
Files
-
538e817960c249842844e5c44f6ffcdb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE