Behavioral task
behavioral1
Sample
52100ecfd5a377ab8fedd6c0f3b40dec.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
52100ecfd5a377ab8fedd6c0f3b40dec.exe
Resource
win10v2004-20231215-en
General
-
Target
52100ecfd5a377ab8fedd6c0f3b40dec
-
Size
266KB
-
MD5
52100ecfd5a377ab8fedd6c0f3b40dec
-
SHA1
485df563509564cf8c76a8f36e6711b318dbaa96
-
SHA256
914817e3fb5592c85508f62fd7c1b2820b35f2ca2041a66de734eb3018b3bc0c
-
SHA512
9efaa336ff271e8a3632e4df900543e9455872e13ee7c00bfcf846183603d1af240cc67669cafb8828b1c5874666948d3aa9eaaadf08ff45dc0b91c56e452471
-
SSDEEP
6144:ziXI+gWLVMwoB7ACPEkTZ5ZnphzHf3Nrgu6Q:ziXztLVDoB7ACP9BphzvNU4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52100ecfd5a377ab8fedd6c0f3b40dec
Files
-
52100ecfd5a377ab8fedd6c0f3b40dec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE