Behavioral task
behavioral1
Sample
5e4db2367fcba0b4aad1ef98e0a75a14.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5e4db2367fcba0b4aad1ef98e0a75a14.exe
Resource
win10v2004-20231215-en
General
-
Target
5e4db2367fcba0b4aad1ef98e0a75a14
-
Size
269KB
-
MD5
5e4db2367fcba0b4aad1ef98e0a75a14
-
SHA1
f98eecfa19527f1d8f07987064b04b718c1804f3
-
SHA256
4aa9f238022ba682604d1733f832334e655cc956096b7a11e75019c3fc58d0c9
-
SHA512
48c1f05c1d5b0244b6be4f715bca098d536fe3862d27daab59ae387ab35034120b2a69da85515c6248f20b8879735596d3acd16bca4e873057f0399c8fab09d6
-
SSDEEP
6144:Sa83cGl7bu448PGvLKNzsElVKC04yNH8vRqQ1wC3XUM:A3Dl7bulLKxsETKC04yNHwwoXUM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e4db2367fcba0b4aad1ef98e0a75a14
Files
-
5e4db2367fcba0b4aad1ef98e0a75a14.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 896KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 412KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE