Behavioral task
behavioral1
Sample
57f14a6e8dbcecc15ab3fee4f2a52b0b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
57f14a6e8dbcecc15ab3fee4f2a52b0b.exe
Resource
win10v2004-20231215-en
General
-
Target
57f14a6e8dbcecc15ab3fee4f2a52b0b
-
Size
133KB
-
MD5
57f14a6e8dbcecc15ab3fee4f2a52b0b
-
SHA1
2f75afe34a583d8ab0dc11c31d8cbeb4d306eb48
-
SHA256
cd36fe238b6515785c90344f3cccea2e97d7c7670bee2c7991b61cdc490a6243
-
SHA512
6f5c4ad48593aacc85176f633ca525a79aa7f0c599eb9189ec0c198d28afeb1878d13345e1709534b545391837cff10edee1abc1240aafd1e758fbcfa3f9eaa6
-
SSDEEP
3072:uQ0o+x+DdNoXsMl05Mv6txSvklO1nmcEOJXppVn2tM6Te+O9yQOQ:D7EqoXq5Mv6txSclO1HXpbEM6SsQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57f14a6e8dbcecc15ab3fee4f2a52b0b
Files
-
57f14a6e8dbcecc15ab3fee4f2a52b0b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE