Behavioral task
behavioral1
Sample
05458edc614e173cb6438dabbd1ad2da.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05458edc614e173cb6438dabbd1ad2da.exe
Resource
win10v2004-20231215-en
General
-
Target
05458edc614e173cb6438dabbd1ad2da
-
Size
1.3MB
-
MD5
05458edc614e173cb6438dabbd1ad2da
-
SHA1
2f20e6d7af55768ad86bfdf4c04212514d60fe0a
-
SHA256
67f4c9bc0e5afe43761f4be520a7c19b3dda81340268f56865a821032aff09c4
-
SHA512
9b351de2c47deeaef3104005456845ad4f135f1b9270ab21ff1fe7e3184508840d9f5d24e98df85103b94abce46034dc0edfad0cc2a34a88a64d1e97e5e64162
-
SSDEEP
24576:+Ur5NNsU34SEHin1nHziSLoCV1Ti5BrxynKlSlATs1sCfNtvG:Dr5NNsPSEHQNL/1Ta1Ts1ffN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05458edc614e173cb6438dabbd1ad2da
Files
-
05458edc614e173cb6438dabbd1ad2da.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE