Behavioral task
behavioral1
Sample
5dcc23230b8394204028de398b8956d64e211822ff2a182b29834f74ff52ae41.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5dcc23230b8394204028de398b8956d64e211822ff2a182b29834f74ff52ae41.exe
Resource
win10v2004-20231215-en
General
-
Target
5dcc23230b8394204028de398b8956d64e211822ff2a182b29834f74ff52ae41
-
Size
8.2MB
-
MD5
576c71695d8855c5f2421c19b99bb5b1
-
SHA1
e10eb03d91dc04a96b4f96d7aecfc114e3421167
-
SHA256
5dcc23230b8394204028de398b8956d64e211822ff2a182b29834f74ff52ae41
-
SHA512
2fec06246d3ef15808bbfdf4417ba412c5fcde690821fe00ff5859402c07dd714654c5e3dbc395e79826075570566d8f1d81767dd270efa1175f6b58bb2b3fa1
-
SSDEEP
196608:g6EC1zjn/AXMwPlaLdLBKFC6mZIfOigFgGXJzuv:9Djn/AlP8Ldh6SIfOigRzA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5dcc23230b8394204028de398b8956d64e211822ff2a182b29834f74ff52ae41
Files
-
5dcc23230b8394204028de398b8956d64e211822ff2a182b29834f74ff52ae41.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 8.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 346KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7.8MB - Virtual size: 7.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE