Behavioral task
behavioral1
Sample
5a4744e0a815ccf4ae5d8122934af34e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a4744e0a815ccf4ae5d8122934af34e.exe
Resource
win10v2004-20231215-en
General
-
Target
5a4744e0a815ccf4ae5d8122934af34e
-
Size
101KB
-
MD5
5a4744e0a815ccf4ae5d8122934af34e
-
SHA1
cdf452a4399b4b709fe2810ea5371ffc62193125
-
SHA256
e00bd07e8fd56f052afe7af0c4e41c15ea1969f1f2c6cb0e91802e995b235d1c
-
SHA512
58fc11d24c293034269f998feff8a334a5f0de947a6141699928f9f40bd5b581474b51409a72b4f0fe6906e9b902a77a2e788b3bc643f4bbdf181b3ca88a6a3f
-
SSDEEP
1536:ZRviCZ8RAecia8PbsDmEA/pYixj5+ZQrufL12ZGCWmpceLloZ60Au/7aiYRM:ZER7cJ2bKOYiL+ZQruMICV7GLAu/uiJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a4744e0a815ccf4ae5d8122934af34e
Files
-
5a4744e0a815ccf4ae5d8122934af34e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.UPX1 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 100KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE