Behavioral task
behavioral1
Sample
5af5e75e289e2e60d5ac8589c4e3e338.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5af5e75e289e2e60d5ac8589c4e3e338.exe
Resource
win10v2004-20231215-en
General
-
Target
5af5e75e289e2e60d5ac8589c4e3e338
-
Size
982KB
-
MD5
5af5e75e289e2e60d5ac8589c4e3e338
-
SHA1
7b39215269d126d13a4349d51dd5c9386e52b28d
-
SHA256
d3a923e3be5944c9fcc6d808ce5e6bafa7f1a97e1b1935b687d5fbedc1aa98f6
-
SHA512
bdb7cc653c16f04441feaa6eb9e28402f0530b814fd6590b00c668345d13ef8d818397c7451f3ce93a9424b8ae78816ad2f06fa33489261cab44d71273858f2e
-
SSDEEP
24576:cSzToLkG7a+MdZGwXsxKpRK21oidaeTPGX:1Uy3TIyRK21VaeTG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5af5e75e289e2e60d5ac8589c4e3e338
Files
-
5af5e75e289e2e60d5ac8589c4e3e338.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 492KB - Virtual size: 492KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 434KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE