Behavioral task
behavioral1
Sample
51ad6101fbb0d30e5a1600476c39f708.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
51ad6101fbb0d30e5a1600476c39f708.exe
Resource
win10v2004-20231222-en
General
-
Target
51ad6101fbb0d30e5a1600476c39f708
-
Size
1.8MB
-
MD5
51ad6101fbb0d30e5a1600476c39f708
-
SHA1
83981ea7450536348cd0411065ac213c408b8f07
-
SHA256
b2ca47803a5ec59c1e7c3c7ad333cb0d888d31831a658805c05ec0c7e4cbd1f0
-
SHA512
591aa2f3b8075f52d118266e0ca4f8de81b3d99f2708e44825752d96872d6b5dc1b17c8536ed515105e23ec3b951596c6c3c0c07a9f5cb0c7462a994abd2b646
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHT:SCqm2Jpr0nNM7Dus7Nx2z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51ad6101fbb0d30e5a1600476c39f708
Files
-
51ad6101fbb0d30e5a1600476c39f708.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE