Behavioral task
behavioral1
Sample
54498120b3caf397e80c1e4181d8a719.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
54498120b3caf397e80c1e4181d8a719.exe
Resource
win10v2004-20231222-en
General
-
Target
54498120b3caf397e80c1e4181d8a719
-
Size
209KB
-
MD5
54498120b3caf397e80c1e4181d8a719
-
SHA1
af6fb2b5a2f3bc3763366f9b03b1d5f0f99fc459
-
SHA256
196619794e2f17cf108c5dbeba3cba7aba6f0351a3f64f56b406870613c46676
-
SHA512
c5a80bc9f94919498e5c72bfb7b590d838529ad6913e4a3b34f73b16ce549c50d7cf5e33e65bb2f0f4e2b8bfbaa4ff26c630c050b9f552ccc2a8b09ee688d7d5
-
SSDEEP
6144:Tww63jVrcnW0Hg0t+h+W9KZxT/Ij4TEZwbuld+E//burQgzenLfk:Mw6Bge9hh9KX/aVwbuld+E//bDgzeLs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54498120b3caf397e80c1e4181d8a719
Files
-
54498120b3caf397e80c1e4181d8a719.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 209KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE