Behavioral task
behavioral1
Sample
5216a2c49dd9bd5cf1377b336001d92a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5216a2c49dd9bd5cf1377b336001d92a.exe
Resource
win10v2004-20231222-en
General
-
Target
5216a2c49dd9bd5cf1377b336001d92a
-
Size
2.0MB
-
MD5
5216a2c49dd9bd5cf1377b336001d92a
-
SHA1
adbd2ed40aa301cd0818623c4ca6999c2947a926
-
SHA256
2b0126f64c06f1ba5fa8df21809c6072080c3fe9e9ee5fb8a76bcb36ce919d64
-
SHA512
f9a13bac74ebe3d98e6427d0c9041d7bca8af3fe269322621f88bceb9d400897d4cbf0de9e0468cb330b1585b551ed1de4479a77f60c2997da23c7b21fb55841
-
SSDEEP
49152:DhyrOFdh4jqgcFXZa7+98Og+yY+OU+dHaAgcFXZa7+98Og:VyrOf+jqgc1Za7+98Og+/JU+laAgc1Z+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5216a2c49dd9bd5cf1377b336001d92a
Files
-
5216a2c49dd9bd5cf1377b336001d92a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE