Behavioral task
behavioral1
Sample
05555ca78c7882cd33f4c0a25c2e78ef.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05555ca78c7882cd33f4c0a25c2e78ef.exe
Resource
win10v2004-20231215-en
General
-
Target
05555ca78c7882cd33f4c0a25c2e78ef
-
Size
2.9MB
-
MD5
05555ca78c7882cd33f4c0a25c2e78ef
-
SHA1
d8f276f0dfba0582fee11842d46c9b5215bc5f88
-
SHA256
a83242b91bab621746819e5e501d6a9719a2301c77730738a991a9be2279a2ca
-
SHA512
00d4a431b770bbeb911fd933b87b16b1a9bb9859b564695d4cd5d2431a57ef797e1bad421e8dd1772746b3f5bcec5899a635c51e82524246862a17c71eba4d84
-
SSDEEP
49152:TM91RrT405bNuJV99PQnvb1CBQQUUvmhjCWm2gGr1/SgPjCvIiy:TsnOJV99PQnDIBQQUUvmf/gGrFSAGvIx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05555ca78c7882cd33f4c0a25c2e78ef
Files
-
05555ca78c7882cd33f4c0a25c2e78ef.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE