Behavioral task
behavioral1
Sample
5fde1571e915ca297848ac081909c1a5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5fde1571e915ca297848ac081909c1a5.exe
Resource
win10v2004-20231222-en
General
-
Target
5fde1571e915ca297848ac081909c1a5
-
Size
157KB
-
MD5
5fde1571e915ca297848ac081909c1a5
-
SHA1
1e37d350a7b5dafe30b4b59a64e0979b9ed39115
-
SHA256
45969cf180d476dac823b56bbe6468a3bb6bc433b9235dc7a14bec58feb6dfdb
-
SHA512
769dd87830aa961831a9f9ede0b656331334884a8a9d0596e6df86b0267481732a6a1c4e9e26b60bc2f077c4dcc1534fe8516bf9cfb6999b14ee0f19e055b2c0
-
SSDEEP
3072:GaVjJCk2tmFx9ZYtSg7YZD8XbH8MCz/myqzvLBfHsolg2NBNK0uaK:GYIk2mFx92sFDybH8V/mXzuog2N/K0O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fde1571e915ca297848ac081909c1a5
Files
-
5fde1571e915ca297848ac081909c1a5.exe windows:4 windows x86 arch:x86
de39dc68941cc6307e3b2590c857a907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 68KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE