Behavioral task
behavioral1
Sample
5120bcc947f44657cb3d4df8f3fe7065.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5120bcc947f44657cb3d4df8f3fe7065.exe
Resource
win10v2004-20231215-en
General
-
Target
5120bcc947f44657cb3d4df8f3fe7065
-
Size
1.3MB
-
MD5
5120bcc947f44657cb3d4df8f3fe7065
-
SHA1
fc1376ac15c93b42a96cf6e4ecc6cf6930aab613
-
SHA256
9a1f3377ce459f6244858abb24ddcb45a821d822c97a1ae3631bf163bd49b846
-
SHA512
fc91c255df6470100f542f44e64e28d0208eec03eff073b85f552e79e1fac39e1b179684c4c5e28641ae70de273daeb3e5cb018abef3673888555a9c0ea02e1c
-
SSDEEP
24576:p8azXGu0FgqpdOrx4DrIxBSfE8lDOZrprxno+TS2ZmczHMICQWhRINN2YUgvG:SarG6N47ftkp1od2Zm2M7QWh+X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5120bcc947f44657cb3d4df8f3fe7065
Files
-
5120bcc947f44657cb3d4df8f3fe7065.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE