Behavioral task
behavioral1
Sample
55a89564f8b545dee72c5450310eccf9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55a89564f8b545dee72c5450310eccf9.exe
Resource
win10v2004-20231222-en
General
-
Target
55a89564f8b545dee72c5450310eccf9
-
Size
133KB
-
MD5
55a89564f8b545dee72c5450310eccf9
-
SHA1
39f8fc5abc9f16165f3210d9dba79684c60bb90f
-
SHA256
c969fac708d5e98a577caff8f98f2d7b3712245dde6e0eb2770d0ec3b9c69b8f
-
SHA512
e1fcb2e6e1bd943a900ec9b53d73e1926feeeaf95e857d6835ea6566b01a45d9cd6bdf9952c237a793bb7e5989ec0d8691660053be95e9d05774719749470856
-
SSDEEP
3072:8KNYdxhZ6jS0PfXk7DuhpmmplABTC2EfGiVhj9NWld+tR5I7DiYEUHMQ:8kgx8fDpJQBTCdGq9Nid+f+CYpMQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55a89564f8b545dee72c5450310eccf9
Files
-
55a89564f8b545dee72c5450310eccf9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE