Behavioral task
behavioral1
Sample
51d176a64be330463f6c4ac1b921070f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
51d176a64be330463f6c4ac1b921070f.exe
Resource
win10v2004-20231215-en
General
-
Target
51d176a64be330463f6c4ac1b921070f
-
Size
133KB
-
MD5
51d176a64be330463f6c4ac1b921070f
-
SHA1
acc52764c43a2e785cb0c88fd5c6d3f33d94aec5
-
SHA256
b28e029b99e45d37a5373bbcc09bec70a9ad5eee33abc21be4ed43ed6d29c623
-
SHA512
ff013c1964e96e8dcbb9c32e9ce0b7578ad72575b2aa386f4a86db47c20e63d48dbccb862c921a6da482ed56682a38ec702d0d578dc7b37f6d102f19c5082e16
-
SSDEEP
3072:ZCzslhfce4hk19n5RtxL8h1/F2tafFiA8FAT0RBcYDx1V6dQ:HhCy19n5Rb8hHSa9P8m0RBRWQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51d176a64be330463f6c4ac1b921070f
Files
-
51d176a64be330463f6c4ac1b921070f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE