Behavioral task
behavioral1
Sample
507a97f4e98a9266d5f119af6ae9f4fe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
507a97f4e98a9266d5f119af6ae9f4fe.exe
Resource
win10v2004-20231215-en
General
-
Target
507a97f4e98a9266d5f119af6ae9f4fe
-
Size
490KB
-
MD5
507a97f4e98a9266d5f119af6ae9f4fe
-
SHA1
7018edf2b4c9bb04c80245427f92b7adf7de5914
-
SHA256
e857c3788bb6d6946a976625dc9bf8282ad72d6c965df304d9083c4b1397c1ff
-
SHA512
ac5914c38e84cd6a4c2fbdbc38cea2667b152ccc594f32e07fd08797daeafbca2d94ce56e24830b081e3be2d0ebaf9102d263d8d08ea9a240463cc5907d9a420
-
SSDEEP
12288:FAIGIt0lAxGeIzQ0vbQKa7wIbDAGl9wToTIildNEWLgRMKz:Ht07eC934wuP9wOldWWLgRMKz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 507a97f4e98a9266d5f119af6ae9f4fe
Files
-
507a97f4e98a9266d5f119af6ae9f4fe.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 615KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE