Behavioral task
behavioral1
Sample
55cb61119ea1e5e49c4b824072623c3d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55cb61119ea1e5e49c4b824072623c3d.exe
Resource
win10v2004-20231215-en
General
-
Target
55cb61119ea1e5e49c4b824072623c3d
-
Size
736KB
-
MD5
55cb61119ea1e5e49c4b824072623c3d
-
SHA1
f495c84eaeb6f4e9399e9160e1c7a3f323613c13
-
SHA256
828e34a624541240b0253ba12b199b473bb78686e5f536e39ea1f1fb613c917b
-
SHA512
0193e7bee18c8b9244980909357b5f2a6d266aef44380db05652e2217d5a800951b2c8c7a53931fc1ab31ca19ec42dae6d50b4032668b28255a0a3de2927b31b
-
SSDEEP
12288:dqE2WtTee0kl5CHq/J3ayN5mg0C0qkeSSkDRj91JaQMHmCjq01u3CKPjQf:zhtTeNxHOd1N5D0C0qV0dnJaQA2012Cx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55cb61119ea1e5e49c4b824072623c3d
Files
-
55cb61119ea1e5e49c4b824072623c3d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE