Behavioral task
behavioral1
Sample
54736c5ed6fbd7153cd420d405cf2e02.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
54736c5ed6fbd7153cd420d405cf2e02.exe
Resource
win10v2004-20231215-en
General
-
Target
54736c5ed6fbd7153cd420d405cf2e02
-
Size
133KB
-
MD5
54736c5ed6fbd7153cd420d405cf2e02
-
SHA1
391156502565341cd568f3857a9705bbaeb05ad2
-
SHA256
900cb20b4326c7041325ab0927a076bf4b552f96affab7b0c9416ebca4faab44
-
SHA512
b841595743b0584e6cd3bdf762cef6a0737a8bcdbb19ee7b28fb50bd94336e94540e5c2bae48f8f2a86b937c967952a9c746286762176706f5d162c348fccc18
-
SSDEEP
3072:ErzOOeVwju8V8OaS51kpjSl2fMaiKKrhPhkBIHpFkKJ+8eQ:EO3DR+1q+rfkKJxeQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54736c5ed6fbd7153cd420d405cf2e02
Files
-
54736c5ed6fbd7153cd420d405cf2e02.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE