Behavioral task
behavioral1
Sample
54de6d4ecd141f061ebaf0358a5b13d2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
54de6d4ecd141f061ebaf0358a5b13d2.exe
Resource
win10v2004-20231215-en
General
-
Target
54de6d4ecd141f061ebaf0358a5b13d2
-
Size
17KB
-
MD5
54de6d4ecd141f061ebaf0358a5b13d2
-
SHA1
3b9dd834a2236a25875a12c71d2a3ef0da814655
-
SHA256
b59062dceedac735fac205cc5812e8e119c864f500cdfd93f1a78785c35a51d7
-
SHA512
ad389ee20cec171160a3bb09bb8fa0d4a178481f7b4dada2f6f434bb861467d6b5ffc2d7686e3aec9fba0440ee5cd08da9529a2e305abbb8a54ef3abca7d82f5
-
SSDEEP
384:605Y6No1k1Gt2ZkKK0iMDtym3n2OJRV4NsGuRiJoodOJyuP:E6No1zt2ZzlDt53PJvDtIJN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54de6d4ecd141f061ebaf0358a5b13d2
Files
-
54de6d4ecd141f061ebaf0358a5b13d2.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPXA Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPXB Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE