Behavioral task
behavioral1
Sample
51919ee753f08271b992e268f5bb7e71.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
51919ee753f08271b992e268f5bb7e71.exe
Resource
win10v2004-20231215-en
General
-
Target
51919ee753f08271b992e268f5bb7e71
-
Size
5.3MB
-
MD5
51919ee753f08271b992e268f5bb7e71
-
SHA1
719cb415cbe46329f5d196564936924480c96693
-
SHA256
a79a2c0fc9bb69e2eb0ca2a425bb13d049dc14fc52a3d76341b93e993264cea9
-
SHA512
1903237b5afed76aca59c75b7eba68a909e92d9ca0d3f7cc8a633f8e06508880de381d25275d8e65d3f42d848ca7783727d75802c8f8bc1830a4e5e41de395cb
-
SSDEEP
98304:v4HROniY04cVHVvKoNW1kkV5HWWehdnxFJLFXC+SyI+29MHVvKoNW1kkV5Hj:v4il81vpS52Wehdvk+11vpS5D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51919ee753f08271b992e268f5bb7e71
Files
-
51919ee753f08271b992e268f5bb7e71.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE