Behavioral task
behavioral1
Sample
5d2fea8ee29c7468d948e7f5d9fb91f0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5d2fea8ee29c7468d948e7f5d9fb91f0.exe
Resource
win10v2004-20231215-en
General
-
Target
5d2fea8ee29c7468d948e7f5d9fb91f0
-
Size
111KB
-
MD5
5d2fea8ee29c7468d948e7f5d9fb91f0
-
SHA1
cc5e147979cee8d19910652745c75497cfb7690c
-
SHA256
cf2ae937c53a37edc6b835cc6da644e75ed26b8d1b58bffb01352479d2ec9f0f
-
SHA512
b68e88b407b463f0a265a69e2f31ae0ab21944b4454b7d748f4966e8339b4e30069b795a78e2fbc2d00a801a14509fff48dc12ab96a182c0cfe5596f48ae7037
-
SSDEEP
1536:BAKdxMMzEiEpwVmfiu3GKT5tzlBH0v1+FdA:bzE8VmquWGrvH0v1+FdA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d2fea8ee29c7468d948e7f5d9fb91f0
Files
-
5d2fea8ee29c7468d948e7f5d9fb91f0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE