Behavioral task
behavioral1
Sample
530f9d780376b1a6b02d2414c7c49945.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
530f9d780376b1a6b02d2414c7c49945.exe
Resource
win10v2004-20231215-en
General
-
Target
530f9d780376b1a6b02d2414c7c49945
-
Size
5.5MB
-
MD5
530f9d780376b1a6b02d2414c7c49945
-
SHA1
a5928e484a8d39765795330685f00cbcce08ad26
-
SHA256
61af4f93b20d31a7d9489c44e1cee7dd2aed7cef73a7b5d96814ac3d6bfb2f7a
-
SHA512
b22f560cd1e8dd317e6be487064a367a4edb035041bc5c3ac943691a5bf0afc8b2712b14d2a899f6a3ae0e9a19475245035f95b386f7279444e7eae99934085b
-
SSDEEP
49152:3vPNg0pIG7cqRtXtPstmmsyWPcOiihg/DMV1U02WdJP4m5NGypay3vRmCFOGNj8L:fFDl76MwDMVxNXJ35mCckFR+vicS43
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 530f9d780376b1a6b02d2414c7c49945
Files
-
530f9d780376b1a6b02d2414c7c49945.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE