Behavioral task
behavioral1
Sample
55aac43e8355dda3a9fbf07f9757a582.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55aac43e8355dda3a9fbf07f9757a582.exe
Resource
win10v2004-20231222-en
General
-
Target
55aac43e8355dda3a9fbf07f9757a582
-
Size
133KB
-
MD5
55aac43e8355dda3a9fbf07f9757a582
-
SHA1
4781b90959ad8b798c48c816cad7edf6cc41ce59
-
SHA256
b590842ba8df415381bf0b0f68f15a59dad07d3678bb29154c1f78767c2b6351
-
SHA512
8e40669745c7ecc755661b602679a1a1523a340c7906f04eff03f98034aa6793d12fe65ab32cc17278ef9dfca3f245f8108a78d6aa1a7aaf57d0ee6aae0c773e
-
SSDEEP
3072:QvH6ZMXsbgLaTlQ3nF5MVQ57ux531cubtq/kEyQ:QiZ1bOG63F5MVEux53OubtgYQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55aac43e8355dda3a9fbf07f9757a582
Files
-
55aac43e8355dda3a9fbf07f9757a582.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE