Behavioral task
behavioral1
Sample
5fdd20519b59e64e90aea04c0ca8db95.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5fdd20519b59e64e90aea04c0ca8db95.exe
Resource
win10v2004-20231222-en
General
-
Target
5fdd20519b59e64e90aea04c0ca8db95
-
Size
30KB
-
MD5
5fdd20519b59e64e90aea04c0ca8db95
-
SHA1
4397980248e34d9e762cd0b40bb3a9c9eb93948c
-
SHA256
e25d10d303cfa9cf3dfaecbb7a8268765baecc64c4f6d6d28591f83847d429d8
-
SHA512
4ca27fcf6d8edeaf468c960705f63d67823c3854bfe9e5762c555ceb11276e067f9e8261d74e67f8495b4f1680be5ab7168454365d6a726290ea417c1e8ff0a7
-
SSDEEP
768:rp6fOD7Q3iVxjhCzL/kvOkuYUTdMRldIlromr0D9zMDe:rD7Q3iQrkvfyWQN5r0D6e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fdd20519b59e64e90aea04c0ca8db95
Files
-
5fdd20519b59e64e90aea04c0ca8db95.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE