Behavioral task
behavioral1
Sample
511bfe2fb428d41b210df4e06d38a56a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
511bfe2fb428d41b210df4e06d38a56a.exe
Resource
win10v2004-20231222-en
General
-
Target
511bfe2fb428d41b210df4e06d38a56a
-
Size
1010KB
-
MD5
511bfe2fb428d41b210df4e06d38a56a
-
SHA1
9caa916d58bce0d857e4ebf5f3d6650ffd9f7d79
-
SHA256
0e5a9882098ac0f3ba502ccb7a1f61a4ce4e7d1398a20c05795dfaddcfb1bb9a
-
SHA512
87c7239ed53ae0fcd87ce23842269a0d62e3d85f5a4c8a6d4e58d92ae375c1e017e2120e79216387f3584e0db06aa6c803818417707e82132eaa91ea343c4ae0
-
SSDEEP
12288:SZRv7/ZL+34kbfYTfml99h45QszSJxy/sR2nVsjZ/t9rYTfm:SHZLdkrmfutlszSZ2nClthmf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 511bfe2fb428d41b210df4e06d38a56a
Files
-
511bfe2fb428d41b210df4e06d38a56a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE