Behavioral task
behavioral1
Sample
51849dc114e9d77032feeb99c8e29d02.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
51849dc114e9d77032feeb99c8e29d02.exe
Resource
win10v2004-20231215-en
General
-
Target
51849dc114e9d77032feeb99c8e29d02
-
Size
252KB
-
MD5
51849dc114e9d77032feeb99c8e29d02
-
SHA1
ba44ce84cbb149746708b221245bc163f8e54f27
-
SHA256
267ecf64013ccf56e5657f8b85149e2cc460aac9c88e22598bf563476322a9cd
-
SHA512
3173273629c51e6552664d2238fe5df8b55941bd03c0f41fb45bcec444d861b841cac966f2e65efd539cab379b794f2511407379975a637f8b09594441f073fd
-
SSDEEP
6144:Cly0sB0fIsfK4rGlyMaX4Yl+yYxxjN3d0vyi1oS:Clyh47oRyYfN3d0vyi1oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51849dc114e9d77032feeb99c8e29d02
Files
-
51849dc114e9d77032feeb99c8e29d02.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE