Behavioral task
behavioral1
Sample
5b5f4ddee69dbdcc2161ad9b387e4770.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b5f4ddee69dbdcc2161ad9b387e4770.exe
Resource
win10v2004-20231215-en
General
-
Target
5b5f4ddee69dbdcc2161ad9b387e4770
-
Size
114KB
-
MD5
5b5f4ddee69dbdcc2161ad9b387e4770
-
SHA1
2a1ffb2f5448f2770518f31085125ded0e515904
-
SHA256
e6e73533516f04ab952ef31b77e0bf25eafc66879e9dbaef964bd4630e7dce12
-
SHA512
406b3100ae350205690985c978c76bd7a7648efc3963ddb7565dbab8f7fd84a2d68782a6713b218f9102f83aa4cd01856612ad0de652b9e13ed51ef1e6b0dc91
-
SSDEEP
1536:gO/cnoV/vkCl1L9YKpU+JRsKGrj2L2ERUJYM9r120Y0X6H5S33g3mmH9OkOYu9hw:SnoV/v193Y+SXKmB20B6HBmmvs1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 5b5f4ddee69dbdcc2161ad9b387e4770 unpack001/out.upx
Files
-
5b5f4ddee69dbdcc2161ad9b387e4770.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.gdnhv Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gayepi Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aapcqy Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qndflex Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sxuw Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.beaxajt Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ