Behavioral task
behavioral1
Sample
55628d63ac29387df3a722fab1d2b51a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55628d63ac29387df3a722fab1d2b51a.exe
Resource
win10v2004-20231222-en
General
-
Target
55628d63ac29387df3a722fab1d2b51a
-
Size
29KB
-
MD5
55628d63ac29387df3a722fab1d2b51a
-
SHA1
29e53eb6c87d06764c9a6d18825bf81dc2a8dd12
-
SHA256
ffa39744d7d255af9077b17e997eaa6e8d36875e5aa7eb5bc2a03e9aebccb7e5
-
SHA512
16e1b1f027fa00f9811413cad57c10cd233b588cdda2e46614821c16619f50530eb8b610352d646239972d866bd5a878944991c0c5e8ea15c1528c32ee1eb6ba
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFF:SKcR4mjD9r823FF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55628d63ac29387df3a722fab1d2b51a
Files
-
55628d63ac29387df3a722fab1d2b51a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE