Behavioral task
behavioral1
Sample
5f57066a2e11e50256ddb08365dbc78f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5f57066a2e11e50256ddb08365dbc78f.exe
Resource
win10v2004-20231215-en
General
-
Target
5f57066a2e11e50256ddb08365dbc78f
-
Size
12KB
-
MD5
5f57066a2e11e50256ddb08365dbc78f
-
SHA1
75d93c92c15de4c17df15f49572bbec03cdb078f
-
SHA256
ec428bf8b345975a47e8ee7d008deeea90fae95fa92262dfa62327fb5373594e
-
SHA512
3920a1d7afa3f8ddd8f440357052793bf5e80fdee8d2d596c699ba7a6edc63fadf6d53e3ba270acf49e6300774edc5eb25b45eb3ef3aabee3808ea7dd9282ff5
-
SSDEEP
192:JE5/OpcvcmnCFhTP61TfteOvacJlq2Sk9+O0VnFOql3IBLFfFMt:/pcU6C3P6tEOvaujSk9+zVFOWIHfGt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f57066a2e11e50256ddb08365dbc78f
Files
-
5f57066a2e11e50256ddb08365dbc78f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 992KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 317KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 320KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE