Behavioral task
behavioral1
Sample
57bc334ff95f5bf8717965b8015056fe.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
57bc334ff95f5bf8717965b8015056fe.exe
Resource
win10v2004-20231215-en
General
-
Target
57bc334ff95f5bf8717965b8015056fe
-
Size
1.8MB
-
MD5
57bc334ff95f5bf8717965b8015056fe
-
SHA1
f57dfc9987fa3f815abe0c39d6ada3329bc72afc
-
SHA256
32eeebdb2763ab36ccf44d7e5e3acb6ebd30396ecfcf15e036a843f6ef731650
-
SHA512
870d893749962dfed24794e70bdfc42aae585b91a25204c63fd84e9ecd83b9740b37f34e4e2f52edaf957995b0aa11f93fb727c56e6fdfe680d4d029bce0be73
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqD:SCqm2Jpr0nNM7Dus7NxK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57bc334ff95f5bf8717965b8015056fe
Files
-
57bc334ff95f5bf8717965b8015056fe.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE