Behavioral task
behavioral1
Sample
5385ce661f0b558d883eb23fbb60d387.exe
Resource
win7-20231215-en
General
-
Target
5385ce661f0b558d883eb23fbb60d387
-
Size
3.6MB
-
MD5
5385ce661f0b558d883eb23fbb60d387
-
SHA1
5c3b2a121f1f7e69663b6d0e5493cd01551faf5d
-
SHA256
216c51be4b3c931cbc3a6b9284070dfb508d8efd23b4dde76da7d12dcfb4a6a5
-
SHA512
9ad075fcadeb4213707e6cdcda18ad71d453d05efab52564d152296c0e178c90eac6a38f4e8b5272f404195eb750c39955d7da337cf17dcdbd82593648a4ffc7
-
SSDEEP
49152:Kqc+gZ6oU3ITwD2PWXewKVpUurvrJ0OYMiHUHyqVkhuWgw/dc4efLNujwxRnzQVb:rgsoU4UDMUumBHQkMWgedcNN5rnzQ33J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5385ce661f0b558d883eb23fbb60d387
Files
-
5385ce661f0b558d883eb23fbb60d387.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 31.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE