Behavioral task
behavioral1
Sample
53d16decefd08ecd4fbe5e0d404df8cc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
53d16decefd08ecd4fbe5e0d404df8cc.exe
Resource
win10v2004-20231215-en
General
-
Target
53d16decefd08ecd4fbe5e0d404df8cc
-
Size
5.5MB
-
MD5
53d16decefd08ecd4fbe5e0d404df8cc
-
SHA1
30a840721bbec8f02bb9c9aab8e0d0ed2d368f2a
-
SHA256
e6cbb9602efac698dc3eb4a7a4e37adeba45f59688ad62f735cbbbae0428efe8
-
SHA512
09f9aa2fdc6c7e06a030ff718fe8fef439db5afe6382900526d5f5917b27a6e80d3821d129f34dc8f2c5ec0fa30147d3cb47dcdcefd5537c934674db5b4cd7ba
-
SSDEEP
98304:QiXCiEG2XIHytqQ+qDuYL2rRiEn1RMRRRJuoBWiZDNY1kB/tyOKz54gKzDQr0pDp:QiXCNnlwQUShARQf5Ppo7zabQr0p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53d16decefd08ecd4fbe5e0d404df8cc
Files
-
53d16decefd08ecd4fbe5e0d404df8cc.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.4MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE