Behavioral task
behavioral1
Sample
5af0fda3976b8611241c33eccd03ee78.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5af0fda3976b8611241c33eccd03ee78.exe
Resource
win10v2004-20231215-en
General
-
Target
5af0fda3976b8611241c33eccd03ee78
-
Size
122KB
-
MD5
5af0fda3976b8611241c33eccd03ee78
-
SHA1
06cb1352e3966247d6fe43c558100f7b8abfb732
-
SHA256
fce30d77dc87affbdf405738d899bf31c73f27f0fbaad7bfea9c44812c4e6d34
-
SHA512
854a0135cfce0649319f62843e39361d381bcbbf2578bcb93a88f44a4b07d9a57a3679f933baddc70e124f63660e812234c7c7b778cc107d8aa371bd476757f1
-
SSDEEP
3072:i2F1lPd4yzbxvU0XimA3uNIkJt+n6AdLl4WfV7cvGJbSJKa:vTV46xc0xAeq0+LLUMWJKa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5af0fda3976b8611241c33eccd03ee78
Files
-
5af0fda3976b8611241c33eccd03ee78.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE