Behavioral task
behavioral1
Sample
05a157b87ece69b25fc14f1ac57cd926.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05a157b87ece69b25fc14f1ac57cd926.exe
Resource
win10v2004-20231215-en
General
-
Target
05a157b87ece69b25fc14f1ac57cd926
-
Size
80KB
-
MD5
05a157b87ece69b25fc14f1ac57cd926
-
SHA1
2d1e48619d0e28d66710f59f76927d3d41064423
-
SHA256
44c43f21b83aad3bd40e32a4f816a13342241e694b143e94a5de2524e003b610
-
SHA512
06316dff18d28a95698ce2d474b9cff097c6e942c61fef6efe12b017759c1ba2acc78bd738c90fa30fad9bc5ec7fb6e8648fe57fb689edd7b0a6833cfab2f57f
-
SSDEEP
1536:VAgNxdCGXnGRuNfWtPYl38g8/OE44UnKKiYn0CmuJd4BXL:UGX4jtwR8g8WVRiYnBbd45
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05a157b87ece69b25fc14f1ac57cd926
Files
-
05a157b87ece69b25fc14f1ac57cd926.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE