Behavioral task
behavioral1
Sample
5528cab6ea585e3b4fde3f5ccd7d4bf2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5528cab6ea585e3b4fde3f5ccd7d4bf2.exe
Resource
win10v2004-20231215-en
General
-
Target
5528cab6ea585e3b4fde3f5ccd7d4bf2
-
Size
133KB
-
MD5
5528cab6ea585e3b4fde3f5ccd7d4bf2
-
SHA1
97a0b97ef4c89b00fb6a90afedbd64089f14bd25
-
SHA256
439198f9f0d3f489eca2cca4799bff3911e54d306c532415ea3b14dfb0440bb9
-
SHA512
c2437371d1332ed794a249fb8562bd56625645359da23ead31d7fc2b546a881ce7b318a8d911c7a22a2074b3355d5fe7fee6ef59864aafc562065848590e1fd1
-
SSDEEP
3072:4es28k+CruqnfC//yyP3YGfpppCjvruHs3pSDv6Z6DL5aupQ:4m+muFgGpWaMqpQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5528cab6ea585e3b4fde3f5ccd7d4bf2
Files
-
5528cab6ea585e3b4fde3f5ccd7d4bf2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE