Behavioral task
behavioral1
Sample
5948fece95d8d07041ad545c3145c46b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5948fece95d8d07041ad545c3145c46b.exe
Resource
win10v2004-20231215-en
General
-
Target
5948fece95d8d07041ad545c3145c46b
-
Size
97KB
-
MD5
5948fece95d8d07041ad545c3145c46b
-
SHA1
5933aa07ce566230af8b63040c832a36481ba0c8
-
SHA256
c0c4051893948e96516aef19751a56b9600d5d6559b0e8045114519601488782
-
SHA512
a24d466d78d4c1059c06f21ec8341fb43168336489f9ffa5430b8ae5c142057ccdfe3e82889dbaf9a5c8b86c2fd811c44f4ad15dbf9f2f0358c44b42041e3ad3
-
SSDEEP
1536:zcDWz9qm74y5Sqi6ytFfO9qcKMYm//SX/AiuUM7I34mJL57AGIsrEWaU:7Ya4GBi6AoHSXCIb57AGzra
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5948fece95d8d07041ad545c3145c46b
Files
-
5948fece95d8d07041ad545c3145c46b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE