Behavioral task
behavioral1
Sample
05ab27bfd125e6e1fdf184c65e35c4e0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
05ab27bfd125e6e1fdf184c65e35c4e0.exe
Resource
win10v2004-20231215-en
General
-
Target
05ab27bfd125e6e1fdf184c65e35c4e0
-
Size
5KB
-
MD5
05ab27bfd125e6e1fdf184c65e35c4e0
-
SHA1
9e88be144d15261599c60a754723b0e80a559095
-
SHA256
d47fb8f9200d657c3ee37ccc7a6ac1a0f3ce03a62cafeee12047140c4855f2a5
-
SHA512
de910c7d5093c40851a7a7655ae1169ed4645b07a245b2de5b2ea0cbe8fc961b7b8d31c48bf03533bb491ff0ceaad71fed18f9c88618f25d8db957300ba3260c
-
SSDEEP
96:0FGAwFImWh+pfADSIbJTpjo9NK+2qQ5WAkfMjs9NIrkU01QDa91K/YU:0FGr+mWh4XIbJdjuN8r5sf5f51Sa91If
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05ab27bfd125e6e1fdf184c65e35c4e0
Files
-
05ab27bfd125e6e1fdf184c65e35c4e0.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE