Behavioral task
behavioral1
Sample
53fd9656d3b4b6c2e8dc6378d2247a11.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
53fd9656d3b4b6c2e8dc6378d2247a11.exe
Resource
win10v2004-20231222-en
General
-
Target
53fd9656d3b4b6c2e8dc6378d2247a11
-
Size
137KB
-
MD5
53fd9656d3b4b6c2e8dc6378d2247a11
-
SHA1
46260e8a559492da60f0e8bbb2d92720253c4cb7
-
SHA256
e5e9b08171c46422062505c0145fc8094317e30b83928ac850c33aeffe2996c4
-
SHA512
a0d4b17989a062e80fb68701d2a0e2d90a131d5597bf1aa61ec375e5b1e4d9c61dfad0d3b98b73ffbfeab787f8135ef6cf9e8bcc927646b36eeea058d2f97412
-
SSDEEP
1536:u/nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HklJNprKR9lpJtHL53Wj:Ye8jMCjM/keGyMYaKW6WXrORRJtrlq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53fd9656d3b4b6c2e8dc6378d2247a11
Files
-
53fd9656d3b4b6c2e8dc6378d2247a11.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE