Behavioral task
behavioral1
Sample
05df9fcae5d59cf176390427825b0976.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05df9fcae5d59cf176390427825b0976.exe
Resource
win10v2004-20231215-en
General
-
Target
05df9fcae5d59cf176390427825b0976
-
Size
10.6MB
-
MD5
05df9fcae5d59cf176390427825b0976
-
SHA1
6d1b4396eb72239103427e165b23ff4734a68e56
-
SHA256
4a5887d8908d581a712939b8abcc3b4b97979992769c6db347cff12cf860f4a9
-
SHA512
40a242e7c68bac7be15220ae5a28c7bc90998778f05273b44618ebcd68dab3655f1b115c7841d829a58a6b15b62f4d328ebb5f5576ae71dd3546682c0e16ac4a
-
SSDEEP
196608:oWh2Ww5r6oEMyor6oEM+2SVAyv4W6Kr6oEMyor6oEMe:oWwd1gmvSVXp6Ygm0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05df9fcae5d59cf176390427825b0976
Files
-
05df9fcae5d59cf176390427825b0976.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE