Behavioral task
behavioral1
Sample
5160baadb164894c27e3a5427cd46b9c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5160baadb164894c27e3a5427cd46b9c.exe
Resource
win10v2004-20231215-en
General
-
Target
5160baadb164894c27e3a5427cd46b9c
-
Size
54KB
-
MD5
5160baadb164894c27e3a5427cd46b9c
-
SHA1
1328bb84f223332f20e2e12b02d1156b9cb008cc
-
SHA256
7978855c13c38af3531e175d151ae1abb5b2ac818756dee5b3d7d660fbb68705
-
SHA512
88ba8aeb388e44d58916f1fb9b46c775b78d457fbd6dfdc1f80ee332d1adfc44c34b25314efba90e8f647df9b17897dbb6e1122480b3ea1974880e0f7831a998
-
SSDEEP
768:IgyTSwBnQce4U9PS9Ou+L5M5irigwoGbd+Ug5Pq2dAgR+DE6QoZTYEeein:4THBnQ9PC+L5M+h1rJ5yaAgoxQQTYv5n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5160baadb164894c27e3a5427cd46b9c
Files
-
5160baadb164894c27e3a5427cd46b9c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE