Behavioral task
behavioral1
Sample
57d7add28f5724d0cf5c0abcc6f3965d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
57d7add28f5724d0cf5c0abcc6f3965d.exe
Resource
win10v2004-20231222-en
General
-
Target
57d7add28f5724d0cf5c0abcc6f3965d
-
Size
110KB
-
MD5
57d7add28f5724d0cf5c0abcc6f3965d
-
SHA1
241253fd767a795c574f42a6baeea653b1929ec5
-
SHA256
74b2198b38a665fe778792639b63283e544dfb540c09ac095aa2b2822397f9a5
-
SHA512
ac2cb9ff80012d77d9cfdf91bcf6e04d4fce80de800b6f227cb02d53c68cf41a9ba29bb7326745dd15f263cdfba1511cf7d35c745172d7f1f62bfbf07b46ca84
-
SSDEEP
3072:sr3KcWmjRrzSKE97h2Q0vb6ey4K01cY9d8:/39aeexp9+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57d7add28f5724d0cf5c0abcc6f3965d
Files
-
57d7add28f5724d0cf5c0abcc6f3965d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE