Behavioral task
behavioral1
Sample
538909d8d2b177bc7e54c686f1f1fa0f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
538909d8d2b177bc7e54c686f1f1fa0f.exe
Resource
win10v2004-20231215-en
General
-
Target
538909d8d2b177bc7e54c686f1f1fa0f
-
Size
1.3MB
-
MD5
538909d8d2b177bc7e54c686f1f1fa0f
-
SHA1
2592a234bdb3f7485b6988f42a9a11285b6d0122
-
SHA256
73343f3090568eab22598b3ef48cd353e8db8ef307a4632b39557fb12921debf
-
SHA512
23882c737cff6baf703a8a955438b2eb13be173f20f685b3ffde3c26f45dcf20fd3d2e3895565e76ba5ff7cc9744c8ffd661b20a9692c33c99d759af9adae7cc
-
SSDEEP
24576:kaHZQWATHKTlDTG69gGBOAWPFJqbnBqyDfzeHGh6Ht3+Ax6rdyxDERjnhkvG:kaHZQzolDq2lOZPFJkjbuaq3LCFj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 538909d8d2b177bc7e54c686f1f1fa0f
Files
-
538909d8d2b177bc7e54c686f1f1fa0f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE