Behavioral task
behavioral1
Sample
554b12fb21c0b334d6240dd00dc4b7cf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
554b12fb21c0b334d6240dd00dc4b7cf.exe
Resource
win10v2004-20231215-en
General
-
Target
554b12fb21c0b334d6240dd00dc4b7cf
-
Size
302KB
-
MD5
554b12fb21c0b334d6240dd00dc4b7cf
-
SHA1
56a48b2b48ba24535911d8a47d8ac16e5a606687
-
SHA256
f7013e4564158efdf9ad9f2c3ccca5e349cee90a929bd968af9b4488df316bab
-
SHA512
9ee22d4edb5c304787858cb7499bea0a4baa6ce0ddd9fa11d8e80831f13f76427c6688f38dfbdf6eb1ed826d858ece69c8a50cc8bf36b7cab076d04c71c496cf
-
SSDEEP
6144:BU1NU70mS0R+HiHnXklU4RecAhuJ2BmQ:BU1NUAOd2b4uJ2Bm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 554b12fb21c0b334d6240dd00dc4b7cf
Files
-
554b12fb21c0b334d6240dd00dc4b7cf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE