Behavioral task
behavioral1
Sample
53095f08125e769a50de518016f68b0d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
53095f08125e769a50de518016f68b0d.exe
Resource
win10v2004-20231215-en
General
-
Target
53095f08125e769a50de518016f68b0d
-
Size
133KB
-
MD5
53095f08125e769a50de518016f68b0d
-
SHA1
b1804d65d4724de4e025eec8320a8b68fbca1dc5
-
SHA256
43bb472cdaf6cbc570d9bb710ea7d5812b21e6086f5277f15842c59d4873487c
-
SHA512
01193e977970bf1b0a1a8a2b2eea821182169b9569a0a899864ec790bc69229ac12ec94d897eea8f321c21352cf98ce568727d2b587d770b8092ff61b5b3e341
-
SSDEEP
3072:y0LaFL4ATMJzzn50FnE6UK6C+zlBS/KBLuYm5Gs1TlgESlq6qj+6Q:ZcsNP0EK6dzi/KVubNTlx6qj+6Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53095f08125e769a50de518016f68b0d
Files
-
53095f08125e769a50de518016f68b0d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE