Behavioral task
behavioral1
Sample
577a5656c2d9de7982b70428bec1cdf4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
577a5656c2d9de7982b70428bec1cdf4.exe
Resource
win10v2004-20231215-en
General
-
Target
577a5656c2d9de7982b70428bec1cdf4
-
Size
343KB
-
MD5
577a5656c2d9de7982b70428bec1cdf4
-
SHA1
93507c54c1e986f4cdd3586edcd9b8055dc8d463
-
SHA256
543ebd7a254c1257cc3118c9f343b838d1f580805f8741cb42a7a65308518c1a
-
SHA512
1115289abb29f33e6baea7668c30dd2c94c6e55baec9c8596cc1a693240361a446c2d026798af81ebf7472ca5d2bf278337561736c9d1096e43640f561668d5e
-
SSDEEP
6144:KoeK6ONMH4B5HPHuhdkwhGvF92/CsKHeAxf60/5NnPQXM+HzfuJfDDir:KoGMB5HPOhdQ926R+6fDfPQ8+HTarDir
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 577a5656c2d9de7982b70428bec1cdf4
Files
-
577a5656c2d9de7982b70428bec1cdf4.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.UPX1 Size: - Virtual size: 824KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 343KB - Virtual size: 343KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE