Behavioral task
behavioral1
Sample
5935668797ad5305178b0bd59ede3e6a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5935668797ad5305178b0bd59ede3e6a.exe
Resource
win10v2004-20231222-en
General
-
Target
5935668797ad5305178b0bd59ede3e6a
-
Size
29KB
-
MD5
5935668797ad5305178b0bd59ede3e6a
-
SHA1
c427f85716cfcbe341aaef13d7a2918e166eb4fb
-
SHA256
4d7a9b2bb9907b82b846857f69a91d0fcec7307623b6f79c498d7837a4bb9c34
-
SHA512
84f685400da998febf0b0156e5e8b470f02eb5061132a6f67a650f7324c9072ef2ff233c235a54e2c1656d25a2a1fe194780370e2a7617f206ff74e8e215b057
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFJd:SKcR4mjD9r823FL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5935668797ad5305178b0bd59ede3e6a
Files
-
5935668797ad5305178b0bd59ede3e6a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE