Behavioral task
behavioral1
Sample
575f9f1db963a8ceb32d0460c7283c5a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
575f9f1db963a8ceb32d0460c7283c5a.exe
Resource
win10v2004-20231222-en
General
-
Target
575f9f1db963a8ceb32d0460c7283c5a
-
Size
25KB
-
MD5
575f9f1db963a8ceb32d0460c7283c5a
-
SHA1
2c5815a38175ba63b1b0e8c73e2a7e8f56995cb1
-
SHA256
e6cd384040aeca36cd27ba8da7f084519a12bcc1da94749cfab0f72018f85796
-
SHA512
166185f2fe6437c0cf0b989c6ed1304365a55e90486b3033970e9645b01ce894257125e15c37e563fda30d0b9b0479c96b54334798d1e59449f278c0bb779159
-
SSDEEP
768:U1NAUsbxtT6sFst/3IrdlLUwSnbcuyD7UhO:U1NAUwtT6sFstwrbUPnouy8hO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 575f9f1db963a8ceb32d0460c7283c5a
Files
-
575f9f1db963a8ceb32d0460c7283c5a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE