Behavioral task
behavioral1
Sample
05cf71e9aacc832600ec026e17438391.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05cf71e9aacc832600ec026e17438391.exe
Resource
win10v2004-20231215-en
General
-
Target
05cf71e9aacc832600ec026e17438391
-
Size
11.8MB
-
MD5
05cf71e9aacc832600ec026e17438391
-
SHA1
53f5cab2beef0f0853b32ff58d60713ddd5f5060
-
SHA256
a8866dd59c29ae2a5de2c85a3ab0000cf6ae63bad451a2e44efecb9bdd5be48e
-
SHA512
557f73181da33677547bdc5561c5821d02ad201e71b5dfeb3de464f28a3ca4db5e75e94bb0defe594b4df6fc5f100d5a1b266ac7a4c4ba3ac580eb87a5f499d3
-
SSDEEP
12288:PHkVE/oSGa6G8vsjcwVfaysKAt8L6scwVfaysKAt8L6scwVfaysKAt8L6scwVfaY:cVXlvE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05cf71e9aacc832600ec026e17438391
Files
-
05cf71e9aacc832600ec026e17438391.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE