Behavioral task
behavioral1
Sample
57e2bdc2d4a60699fdf8494be1dc0298.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
57e2bdc2d4a60699fdf8494be1dc0298.exe
Resource
win10v2004-20231222-en
General
-
Target
57e2bdc2d4a60699fdf8494be1dc0298
-
Size
133KB
-
MD5
57e2bdc2d4a60699fdf8494be1dc0298
-
SHA1
2ecf0e65fc5ed5a6ab047c69b4729581b9ae27c9
-
SHA256
7e40782c0fed84b2721f92d4d7485b6650b099d441cee36324d444c27a7082d7
-
SHA512
57dc5e7099e2df72c2526c8a9963124580e2044b17e2bfbf05a9c1448e0f5d3e8a78cc299afe250f4659fc25695331c4ff81b3f1896bc9036e219284ddb359ab
-
SSDEEP
3072:fSRk+rPDq33QdAXD32k8DaIEFfwT/cZEXEQ:8Zzun+AXYDaIyWeQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57e2bdc2d4a60699fdf8494be1dc0298
Files
-
57e2bdc2d4a60699fdf8494be1dc0298.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE