Behavioral task
behavioral1
Sample
505f5a4d74b958c1172607a0a3fa01c6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
505f5a4d74b958c1172607a0a3fa01c6.exe
Resource
win10v2004-20231215-en
General
-
Target
505f5a4d74b958c1172607a0a3fa01c6
-
Size
169KB
-
MD5
505f5a4d74b958c1172607a0a3fa01c6
-
SHA1
71e805bfac34388bc74ad00515c36a83833ec5c7
-
SHA256
0c392215601e4e888436baa7340f07c3fad8cea355bd966987ccd9206628d849
-
SHA512
f40c06b5cc78b2515f2523a5cf5d5bb0de0889d5a4453aea730ac274f289291c6392beb0cdd166dc53f62d37b79645b88dd4a712ac74de0da572cf0ad374f0a9
-
SSDEEP
3072:izfArRzWCic5GH8W3hcq4Ow1KBrhYCcw5qGoulh3MVQOPdc2ZN+Q2Z:kftbH8WxcGw1KBrWCcw5q3uG3Zv2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 505f5a4d74b958c1172607a0a3fa01c6
Files
-
505f5a4d74b958c1172607a0a3fa01c6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE