Behavioral task
behavioral1
Sample
0562fee49957176761571f571f69d457.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0562fee49957176761571f571f69d457.exe
Resource
win10v2004-20231222-en
General
-
Target
0562fee49957176761571f571f69d457
-
Size
2.0MB
-
MD5
0562fee49957176761571f571f69d457
-
SHA1
364bd9a242f948208c3198d4e17a0fb8accf3ad7
-
SHA256
0e145a2db3b38088f2d56bf51e427ec3325ddffc461ce814bce3674753fba214
-
SHA512
4830165412d63efaf391ab66078886fc82d384ae7d816ac87378a7d91216f9319b2348e4609166d3c32ef548ab4e217d0755c387857f0da9460a243f7fa00ed9
-
SSDEEP
49152:KF06f4pn1xQDSHlccakLz0ibq6yqhhubDY0CgOnQvEn0bcakLz0ibq6yqh:l6f4pn1WUWcakcibiqhMbMgOn7n0bcaI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0562fee49957176761571f571f69d457
Files
-
0562fee49957176761571f571f69d457.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE