Behavioral task
behavioral1
Sample
57c6239698f09f996968fd951721d4a4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
57c6239698f09f996968fd951721d4a4.exe
Resource
win10v2004-20231215-en
General
-
Target
57c6239698f09f996968fd951721d4a4
-
Size
568KB
-
MD5
57c6239698f09f996968fd951721d4a4
-
SHA1
9b7449bf6f9feba63d971dc752701b87ce520e6e
-
SHA256
962273de9b5bb9ec778aa9428cf455a0bd3abf6490368d4e90f3f2aa2241a481
-
SHA512
f1b0d60d5de65711f41ae26c233ee4fd394d2338196770f4b3c0712c1c5133c8c5523059d76d6ffdef820f1cb2a6d4e18121d0d5a52703a1a8d4b10f0ac36c94
-
SSDEEP
12288:/CS5N3dyJSDXC9sg6hjHWrwyTfdAjI/t2d8m70ImP8//KDObr:/CSvNy4jmsgGWrwkliIVa90DPKyC/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57c6239698f09f996968fd951721d4a4
Files
-
57c6239698f09f996968fd951721d4a4.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE