Behavioral task
behavioral1
Sample
513de86e1fe766d945e00221b975263d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
513de86e1fe766d945e00221b975263d.exe
Resource
win10v2004-20231222-en
General
-
Target
513de86e1fe766d945e00221b975263d
-
Size
403KB
-
MD5
513de86e1fe766d945e00221b975263d
-
SHA1
5e940674bee9f3605617153f91cfd7b3ce64596b
-
SHA256
1b739491e362fe610b3b9cfc8005f42aa466523ae3c1e3a9b81c79598dcd7457
-
SHA512
a5bdeda5e0aa25c71c810d85d42a7e07783d9da4b3c12ea550074fdd905723674f2956468a70834758d606c7f245b505ad03c8f3d325a280e06f8a40e7e18ea8
-
SSDEEP
12288:ysMsoPKiyGP/FiAOqKMF4c5psXy9lC3GjizoS:yTszGwAnKMF4isCe3G2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 513de86e1fe766d945e00221b975263d
Files
-
513de86e1fe766d945e00221b975263d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 400KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE