Behavioral task
behavioral1
Sample
050083809043849a95bc6453670459da.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
050083809043849a95bc6453670459da.exe
Resource
win10v2004-20231215-en
General
-
Target
050083809043849a95bc6453670459da
-
Size
2.6MB
-
MD5
050083809043849a95bc6453670459da
-
SHA1
78a73072f86708048cc255f750d3a428de16ec97
-
SHA256
c504b94b2df30d3c97298439fa3b04f2eab5e29e7ad9cf7a567c45ec06376ec6
-
SHA512
a5ac9ed5f4043c32eaa1b739151a48905173e939b63928c275957b354aa88bad23fb72ce0f99cabb21e756881f9238b960444edc651a5940efd5742f26c78ff9
-
SSDEEP
49152:ar4iUjoaj/xn8MmvyTppWy6vu+7uYEyrV/mCBLiAvM6Jay3:kGpx+vyTH2yWT3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 050083809043849a95bc6453670459da
Files
-
050083809043849a95bc6453670459da.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE