Behavioral task
behavioral1
Sample
54da701adac1d2484affef6689458a5e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
54da701adac1d2484affef6689458a5e.exe
Resource
win10v2004-20231215-en
General
-
Target
54da701adac1d2484affef6689458a5e
-
Size
57KB
-
MD5
54da701adac1d2484affef6689458a5e
-
SHA1
a1af57d7917ec2682885d51dff6f283826d8948c
-
SHA256
dcc5a9018a8ce10bc90659cf230ea940957e65f8652882dffe9592c0c1aa74f4
-
SHA512
8da40711b17dff3637b57f70031e626f6453e793b6d49b197ad0ca41b5c4654af678ce876d30ec1d88eb5cb8c619cabc0fb1805d17c09ff44af1ddb112df3db7
-
SSDEEP
1536:V8K2g0WoH3RvYTaZ2tFZLxCrJUchkt4BcR4tCFpo:V5joTgtFZ9kmc2t4WqCFpo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54da701adac1d2484affef6689458a5e
Files
-
54da701adac1d2484affef6689458a5e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE