Behavioral task
behavioral1
Sample
05a509bdb0471558790569edc2061816.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
05a509bdb0471558790569edc2061816.exe
Resource
win10v2004-20231222-en
General
-
Target
05a509bdb0471558790569edc2061816
-
Size
139KB
-
MD5
05a509bdb0471558790569edc2061816
-
SHA1
10953a0c6f2fa99ccbe832c4f790d97a07ccfe48
-
SHA256
b2e506a86da8a642f74abad141ab0033d17abb3c3eda95f621d94efab1d98899
-
SHA512
e119b505d0e94a5e1143d8ed59dd5bb1927f3b21416884639e9b5a5e1d4b73fefd7ff3baae19f6dff2707253df1e5f90f0841ab365de0f7799ff8184c7e48fad
-
SSDEEP
3072:sr3KcWmjRrzSHDhQ4gBIbVbeWoUURo1EJOWa7S6Er34W4JxZ+jm:/zO4gBIb+a1EJxa77ErofX4m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05a509bdb0471558790569edc2061816
Files
-
05a509bdb0471558790569edc2061816.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE