Behavioral task
behavioral1
Sample
524f8040ee028a0be6b93a3676e6f65c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
524f8040ee028a0be6b93a3676e6f65c.exe
Resource
win10v2004-20231215-en
General
-
Target
524f8040ee028a0be6b93a3676e6f65c
-
Size
293KB
-
MD5
524f8040ee028a0be6b93a3676e6f65c
-
SHA1
f7977723626d27b3285e79fe3755c74e9a62b56a
-
SHA256
e27e6ec8035d7cb1959bb29b42f0401d62e0dfa70b2c31f711fe6eea1c8d3c40
-
SHA512
3f0a4f09004b357ec1f4a43f9141b49bb126b35ef410436bd37dd728d076fea0151069fff91f6cb49c870cb52b12e70a0f7b3b4820d25282297b46dc4b1b0822
-
SSDEEP
6144:Orf7qo4Zy2tDdvu0bkMP0TejFmEnKMuC5ExxK3BfY:qfeowyiMW0T/EnKMuCCxxl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 524f8040ee028a0be6b93a3676e6f65c
Files
-
524f8040ee028a0be6b93a3676e6f65c.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 891KB - Virtual size: 892KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE