Behavioral task
behavioral1
Sample
5177d198d38faa0b164ff1c5ddb8fb4c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5177d198d38faa0b164ff1c5ddb8fb4c.exe
Resource
win10v2004-20231215-en
General
-
Target
5177d198d38faa0b164ff1c5ddb8fb4c
-
Size
11.0MB
-
MD5
5177d198d38faa0b164ff1c5ddb8fb4c
-
SHA1
e6b7703da00a0296fac0226e3ce09ce3e85020df
-
SHA256
773293e35a2c4dd1963431d0e1bf900554dfc53824149813a138182c969a98ad
-
SHA512
a33c33977b190257f3356c20e2618cacdec9e9ff38658e976ca261b56e19fb092f88a4c643c91db60a765a9b5356b3f1bb4ca8f22782aa368f6252ab3161e6ff
-
SSDEEP
98304:z9J1MLiYhXS635mCckFR+vicS43JqqeRnCd7fiNvH1VKx35mCckFR+vicS43:pAuOCS33FR+6cB+Rn07U/1c33FR+6c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5177d198d38faa0b164ff1c5ddb8fb4c
Files
-
5177d198d38faa0b164ff1c5ddb8fb4c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE