Behavioral task
behavioral1
Sample
5cfba7e4add6432172e646aa11381361.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5cfba7e4add6432172e646aa11381361.exe
Resource
win10v2004-20231215-en
General
-
Target
5cfba7e4add6432172e646aa11381361
-
Size
25KB
-
MD5
5cfba7e4add6432172e646aa11381361
-
SHA1
7b11fd51d53268da8d8457f17d46d258f9e036b0
-
SHA256
ddfb24847d2cc8496100a9f7e0c4859104aa5f2ca09afebfc8181e63e4172eeb
-
SHA512
f106e95077072e2dca0c65e2ac7e1de956abfbfbf5341823d72350c7467639f4664e945d151b75c1cb75e2e202247a0073fc3e4b0d7018d8cb06728b4194371e
-
SSDEEP
384:06N6okoT6IIAL8Ya30NPjHctJh8b1GSCVW11PQUWN5JsKiE1OPjLLDYA2Eyod3K:06N6ojmyNPbcDh8b1Jee1NWPOpEwXLcL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cfba7e4add6432172e646aa11381361
Files
-
5cfba7e4add6432172e646aa11381361.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 532KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 293KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE