Behavioral task
behavioral1
Sample
5229afadef65174d792fc70599f453dc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5229afadef65174d792fc70599f453dc.exe
Resource
win10v2004-20231215-en
General
-
Target
5229afadef65174d792fc70599f453dc
-
Size
271KB
-
MD5
5229afadef65174d792fc70599f453dc
-
SHA1
9614656dd5c8bc22338b6245d31a56b0563f7ae7
-
SHA256
f0d48f46a4352071a6e2844cd48fbf9e8da7247ce7b58fce228315f7dbf5d425
-
SHA512
f1c74aa4aac6f1ce4319103930f855b59736fd30583020542e93bd5c44b9f01b19d3a0c1c62e5181bbe21bcf0cafcd191e1a7c4d5cae1e7053563980dfc6a6aa
-
SSDEEP
6144:mOSPiVGBqGo8XvXCSC6TgB4PIvGvtx78tQ8vmRoS:r+Dvh8ycGVx4S8eRoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5229afadef65174d792fc70599f453dc
Files
-
5229afadef65174d792fc70599f453dc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 267KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE