Behavioral task
behavioral1
Sample
5768b610797905a7a37ab990c31e1f28.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5768b610797905a7a37ab990c31e1f28.exe
Resource
win10v2004-20231215-en
General
-
Target
5768b610797905a7a37ab990c31e1f28
-
Size
1.6MB
-
MD5
5768b610797905a7a37ab990c31e1f28
-
SHA1
6f852d1ac7a26eeda069df0677f9e16becb7c7e9
-
SHA256
672de1a10c8695fb7742f02cd58ff59fa5650e1b4cd2aef0dc7296f0edee8382
-
SHA512
b29ed5463f586fe704695612e3698b62323221cee67c7278616414ae2d5d1e097fcbc1d5d8da425a1e0208099a098f75bf629b62985021b35d08142e1c9e6ded
-
SSDEEP
49152:+jA1/reEnxCqgmJfmMcakLz0XWzJy581Sa3cakLz0O:D1/JxCqxJOMcakcmzU581lcakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5768b610797905a7a37ab990c31e1f28
Files
-
5768b610797905a7a37ab990c31e1f28.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE