Behavioral task
behavioral1
Sample
548a96f51877fe45c9ae92e6d53ed548.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
548a96f51877fe45c9ae92e6d53ed548.exe
Resource
win10v2004-20231215-en
General
-
Target
548a96f51877fe45c9ae92e6d53ed548.exe
-
Size
298KB
-
MD5
548a96f51877fe45c9ae92e6d53ed548
-
SHA1
afa5296b62584dc4836f564f6f55ff38a3f5bdeb
-
SHA256
dc3ae11a058c602df3ec65a11f8f9ed57579b4a5b931a2901c2a2a33e98ea7c1
-
SHA512
1379b5a156c6fa7daf8f9e2836783aabeee04d80893f83cbc39d6d367dd95614afd5f109a64b5f09b394b19f26285c90c3d66d934eb93e8851904456aea34c03
-
SSDEEP
6144:YjluQoSPIo5R4nM/40yJN0vsr6f3BiCBEt2xY0dD4pMoTEE:YEQoSpqhUKCwkMyEEE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 548a96f51877fe45c9ae92e6d53ed548.exe
Files
-
548a96f51877fe45c9ae92e6d53ed548.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 512B - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB
.shik Size: 512B - Virtual size: 4KB
.nbd Size: 512B - Virtual size: 4KB