Behavioral task
behavioral1
Sample
55a675d043d984c417fafacbcf846c6e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55a675d043d984c417fafacbcf846c6e.exe
Resource
win10v2004-20231222-en
General
-
Target
55a675d043d984c417fafacbcf846c6e
-
Size
952KB
-
MD5
55a675d043d984c417fafacbcf846c6e
-
SHA1
877f01a36a2a0a63ea3b40ff3f5fdff644710639
-
SHA256
f244948e24a00795007731776df7ad16618156c8cf48bd7d3065691d2db2562f
-
SHA512
fdddf0a17ed77223d35c2684e671ef642d70cd7549e2561fbab5eb4606b34911a358ffad9c567f8cc3e67045c3b9d9a58603523113dcf121344760889151e9b2
-
SSDEEP
24576:OpZVh3z3WCz6gOGvhign2gq2zVHdlrI1MWstq/wK+IOBFX6AOELmh:OHVhj31z6gjZignU2zT5I1MWsU/wND9M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55a675d043d984c417fafacbcf846c6e
Files
-
55a675d043d984c417fafacbcf846c6e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 949KB - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE