Behavioral task
behavioral1
Sample
5a1c2e3e3b178bd88a4dd8287c9f5800.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a1c2e3e3b178bd88a4dd8287c9f5800.exe
Resource
win10v2004-20231222-en
General
-
Target
5a1c2e3e3b178bd88a4dd8287c9f5800
-
Size
45KB
-
MD5
5a1c2e3e3b178bd88a4dd8287c9f5800
-
SHA1
453e534c56e99604cba71465a4cece29dbb8f11e
-
SHA256
e77b6883d3b55d8ecb83b0c2f16eeab7df94b0b8d15fccb0e9c0ddf0d8906add
-
SHA512
5a98a2889a2084bb5581e8026f34a39fed3e32307ab51eae5ef2998f1f2d99523e3f63aa6bd05932ad1116c57d4ef2f56393cebf6c9b280c50635f89a11d2756
-
SSDEEP
768:XMocHy8Q9RZpoEwVKohleqILSS69deH5gJz0+sVoQdAFmSqidIo:cozo0aeSSWeZgS9SQd4DJIo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a1c2e3e3b178bd88a4dd8287c9f5800
Files
-
5a1c2e3e3b178bd88a4dd8287c9f5800.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 515KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE