Behavioral task
behavioral1
Sample
5446a594bc8636327c43e27016e32e4b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5446a594bc8636327c43e27016e32e4b.exe
Resource
win10v2004-20231222-en
General
-
Target
5446a594bc8636327c43e27016e32e4b
-
Size
456KB
-
MD5
5446a594bc8636327c43e27016e32e4b
-
SHA1
e565d1231f751204285ecbdb7830bea26b3f7f8b
-
SHA256
e0a7b3274ba8b496de47ac94209ff0f04fea749c80c1252ae36f2239f3f82ec9
-
SHA512
f82b6c3ac56a92330a1a0a880d1cf01213cc1596c7504967ea06e1865b182c9dbb63ca1c687b96a6d9c8941cc61ca3b18393d77be81f5f60fce9609abacbe9db
-
SSDEEP
6144:YgRfcLMVKhWr7HhBvHSnSj0Bdu8vS6UOiVJoHYLN5jCGMGmlOzEMj2vaLop3SbUm:nmUKhI7HhBQvWHNCGMGmsIMBY3qU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5446a594bc8636327c43e27016e32e4b
Files
-
5446a594bc8636327c43e27016e32e4b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE