Behavioral task
behavioral1
Sample
5678629c75a0dd2bc958f90e596fcd94.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5678629c75a0dd2bc958f90e596fcd94.exe
Resource
win10v2004-20231222-en
General
-
Target
5678629c75a0dd2bc958f90e596fcd94
-
Size
133KB
-
MD5
5678629c75a0dd2bc958f90e596fcd94
-
SHA1
56563eb1b60334b0f935895bd4e0a581f9448426
-
SHA256
00cf6a8ac43d542745c77eb0d986e13e18fb7308281280484a9ce8f9f14cadb6
-
SHA512
2b198543c5a2371601c04ba4482492cda005a0a240b991a80848fa90cb541a454c8ce24631b50bc8d33608f6b97cda5b53de5515991254cdd037786eb544e2f0
-
SSDEEP
3072:aBFPo9If78Qas0UWwtnFpgICUkrlMD0zJlXEbyeWA4xG3kvi2Cmw8Q:aBFPo9IfIQuUWwvpdklARyeKxMkK2CmU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5678629c75a0dd2bc958f90e596fcd94
Files
-
5678629c75a0dd2bc958f90e596fcd94.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE