Behavioral task
behavioral1
Sample
5235e272d7823e2c1ced5fba794c6a15.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5235e272d7823e2c1ced5fba794c6a15.exe
Resource
win10v2004-20231215-en
General
-
Target
5235e272d7823e2c1ced5fba794c6a15
-
Size
32KB
-
MD5
5235e272d7823e2c1ced5fba794c6a15
-
SHA1
aa09c9fbfad689763a4582e982735fde1878ce55
-
SHA256
b77fe65575e4f8d538fa416eb553bd4f2025e81fb5ec02c4b9cbf2a16591ede5
-
SHA512
1c56240b1ef9af874460f69653422a869ec055efc84e59b0278404f4ca9b56e37256c5c7e0b9295d1e1acc486138a952a72569d0f7f69e17901c55eb6e48802f
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFIsaVNED:SKcR4mjD9r823F5aV6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5235e272d7823e2c1ced5fba794c6a15
Files
-
5235e272d7823e2c1ced5fba794c6a15.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE