Behavioral task
behavioral1
Sample
5108aa279997c7a09199fbd8eae669a5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5108aa279997c7a09199fbd8eae669a5.exe
Resource
win10v2004-20231215-en
General
-
Target
5108aa279997c7a09199fbd8eae669a5
-
Size
166KB
-
MD5
5108aa279997c7a09199fbd8eae669a5
-
SHA1
26152c7aa57cc081793e751d0734d400bf985ced
-
SHA256
57a24b07f762dafb8336fa17f9456df119f95f8f387e606a230147b97b934743
-
SHA512
ccc6c9c9d26bac75aa465609d59fe2436e923392d01a51ef7c86eb44887390dc9bdd57fd1f79ad26998bcc31139f808dfa09348272924e2fbbc86652679dd511
-
SSDEEP
3072:RnRJzaWd7LvUOjyuie4q0H/++0Q2omH5dr8flCbECO4N1Qdb:RnRJ+WF8OKeUW+ETkC4COwgb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5108aa279997c7a09199fbd8eae669a5
Files
-
5108aa279997c7a09199fbd8eae669a5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 552KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 160KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE