Behavioral task
behavioral1
Sample
5e8b37af45c09fad29cfb7cb2177ee709faa29522dc90a9fb5258a3cb19d51ef.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5e8b37af45c09fad29cfb7cb2177ee709faa29522dc90a9fb5258a3cb19d51ef.exe
Resource
win10v2004-20231215-en
General
-
Target
5e8b37af45c09fad29cfb7cb2177ee709faa29522dc90a9fb5258a3cb19d51ef
-
Size
8.2MB
-
MD5
7553e7da81da1fa87e0c68eb51fbfb85
-
SHA1
05062f8ae27ee562b05dc6b483dd333d8fe1943f
-
SHA256
5e8b37af45c09fad29cfb7cb2177ee709faa29522dc90a9fb5258a3cb19d51ef
-
SHA512
c108a943c35428a7c3711be50a5493054db5c1377d749ecaa9bd50b22aa17aad0054fac52e548c72485b80430f7f92a4e775681a4720242e305cc507dfcd621a
-
SSDEEP
196608:66EC1zjn/AXMwPlaLdLBKFC6mZIfOigFgGXJzuO:3Djn/AlP8Ldh6SIfOigRzp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e8b37af45c09fad29cfb7cb2177ee709faa29522dc90a9fb5258a3cb19d51ef
Files
-
5e8b37af45c09fad29cfb7cb2177ee709faa29522dc90a9fb5258a3cb19d51ef.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 8.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 346KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7.8MB - Virtual size: 7.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE