Behavioral task
behavioral1
Sample
514a8870929a50a805e883f9e08acda2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
514a8870929a50a805e883f9e08acda2.exe
Resource
win10v2004-20231222-en
General
-
Target
514a8870929a50a805e883f9e08acda2
-
Size
1.6MB
-
MD5
514a8870929a50a805e883f9e08acda2
-
SHA1
ed4c44ed05895c064fa0552679a016bb7fa74235
-
SHA256
08eff265be3a519280546a622958cacc190473d831f4812165fd6b87be72d691
-
SHA512
1c8161df41d3cfce1e4852717c0599b12ef9266208f07ccdf48182c11a6e3f1a6185da64a087fd44a1952cc394bb0ab38122d6ea774d4ab8aa2761fa49811f85
-
SSDEEP
49152:AdZKDqFNDpl3r8SvZEGYcakLz06Jrwko6ISSpSefcakLz0O:AdZKDqFNDpl3r8SvZEGYcakc+sBvxcaw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 514a8870929a50a805e883f9e08acda2
Files
-
514a8870929a50a805e883f9e08acda2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE