Behavioral task
behavioral1
Sample
55713e540186fe8c6dd22249086f0f2d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55713e540186fe8c6dd22249086f0f2d.exe
Resource
win10v2004-20231215-en
General
-
Target
55713e540186fe8c6dd22249086f0f2d
-
Size
94KB
-
MD5
55713e540186fe8c6dd22249086f0f2d
-
SHA1
bf8b5ad824dd889fe9fa77623c9d56d87d64ec04
-
SHA256
cf3c5bc5d8bd7b4d37097356d15ba0745242ba51c0ffdb97e25366d31c620bf1
-
SHA512
2cc56692664115adfd1d7fb846520dc0fc9c2a22e38d13ac71064c8e77fe512cabc549c6219f5f911f8cd178254218444897ff7c8de62982a05ca773478c0c46
-
SSDEEP
1536:TY+29+TtxdGTThBN8RFCj38TimElwIMa35WF5j5c7+Zq:0+29ytvGvq8/9/M85WF5bZq
Malware Config
Signatures
-
Nirsoft 1 IoCs
resource yara_rule sample Nirsoft -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55713e540186fe8c6dd22249086f0f2d
Files
-
55713e540186fe8c6dd22249086f0f2d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE