Behavioral task
behavioral1
Sample
055f8f09192d871dc231abbd7d28dac5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
055f8f09192d871dc231abbd7d28dac5.exe
Resource
win10v2004-20231215-en
General
-
Target
055f8f09192d871dc231abbd7d28dac5
-
Size
12KB
-
MD5
055f8f09192d871dc231abbd7d28dac5
-
SHA1
61504ec814f0ce6d77b14836eb0c4348355088c5
-
SHA256
7a0ff4d238a801916cd7f5ef553a3ea0d3e7c66c9424870f44638c82715068aa
-
SHA512
ffaf1a998dd92efad5eadf7acb63be5861c795d80106fdd3f9f3d21037b446f26bdda1419752de09ac4d997cad1aa97eef6ca0c37ce12740ba948c8b153f2b47
-
SSDEEP
192:lvCi1VfwfNHnyR1kli8pzl419TgTmrUXMUpIyyY70qaHhox0:NffwfNHyRKi8UTe0qaix0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 055f8f09192d871dc231abbd7d28dac5
Files
-
055f8f09192d871dc231abbd7d28dac5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DsNiu Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE