Behavioral task
behavioral1
Sample
5941ebc650ac8149dc5640996335bd69.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5941ebc650ac8149dc5640996335bd69.exe
Resource
win10v2004-20231215-en
General
-
Target
5941ebc650ac8149dc5640996335bd69
-
Size
857KB
-
MD5
5941ebc650ac8149dc5640996335bd69
-
SHA1
c892f7c2b69a881016fce94333a778c63032b07b
-
SHA256
731f0362e515e3b3f5b0aaacfb6fad29848d8594e8484858bf01e70f5586f916
-
SHA512
8a15705f88359083856ec198e4d89320da73fbe3b31098ecdbaca4a115f6af7020fb9a42593bcb13613a0e66d59ec6c8efc549ce6b8d8989925d608b6479eef1
-
SSDEEP
24576:Cdx3aYdkw2qUwMt9UzTVCV1wWyugAaXYcZ5XN:0aYl7UwM3UnszwDuMYcPX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5941ebc650ac8149dc5640996335bd69
Files
-
5941ebc650ac8149dc5640996335bd69.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 839KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE