Behavioral task
behavioral1
Sample
557eca26eade7b8029019eb216314556.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
557eca26eade7b8029019eb216314556.exe
Resource
win10v2004-20231215-en
General
-
Target
557eca26eade7b8029019eb216314556
-
Size
1.3MB
-
MD5
557eca26eade7b8029019eb216314556
-
SHA1
5005a27b60ed7dfac758840b83f4edd696451086
-
SHA256
fca255f97e3984b5a29ca8bfa91e1e4573d3dc37003fa83825c543fe0be8f23e
-
SHA512
8467521c589b57b88f10aca8d38e1c0a1394a570e02f5e170d37c70b4ff589db62203cdae6214419806a83e41b330afbf9d5034130f0567bf096870f5209a0aa
-
SSDEEP
24576:t+WZ0TJRl67zOXVArWi6J5xzmJGcpt5DW8yVrQbLwdOVjtDvgjGPFkH+UhhTffxG:0WZ0FL67zcArW9PkptZWdubsdJuTShTY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 557eca26eade7b8029019eb216314556
Files
-
557eca26eade7b8029019eb216314556.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE