Behavioral task
behavioral1
Sample
54cb6fdf1c32aed0e17a889992e9d046.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
54cb6fdf1c32aed0e17a889992e9d046.exe
Resource
win10v2004-20231215-en
General
-
Target
54cb6fdf1c32aed0e17a889992e9d046
-
Size
11.0MB
-
MD5
54cb6fdf1c32aed0e17a889992e9d046
-
SHA1
b5ce355f66583da997d18b1d2d158db4f4ffe18f
-
SHA256
0e0fd6a07d091a1f043d39ac9b6321b929e2b70a2ca31e95c17e613726aaf7be
-
SHA512
df2ee77d1cf0a5b703f63a2b45a2ce8b5a03fe695541caeaa1ab6dc4d8d692eed575189d94bbb8156f2289210cc88048b49595c8c07fc2bff2ff0211771fc68b
-
SSDEEP
98304:I6jxAojn+9q7mU35mCckFR+vicS436BrJphnXFKfZ+m2A35mCckFR+vicS43:IKxAU+cV33FR+6cStJR2lR33FR+6c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54cb6fdf1c32aed0e17a889992e9d046
Files
-
54cb6fdf1c32aed0e17a889992e9d046.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE