Behavioral task
behavioral1
Sample
5955d3f3296a1911ea3dfddc7cebc458.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5955d3f3296a1911ea3dfddc7cebc458.exe
Resource
win10v2004-20231215-en
General
-
Target
5955d3f3296a1911ea3dfddc7cebc458
-
Size
1.6MB
-
MD5
5955d3f3296a1911ea3dfddc7cebc458
-
SHA1
6c60ace8d2932a5cb6864fc12e56c0148928ce4d
-
SHA256
8cdcff4d367f77a3727b49dea77dc15d538ec49032e8c1bdf1687acc0c12d581
-
SHA512
38f8c2c78497f95d3d7cb400ce95ac343d6d9ec54f4f9b69981c7cec245cc5d7351d78c5fd25ac7e88229b337e27e1b3e32a9c39081354bf2b25318a561d49cd
-
SSDEEP
49152:97ES3MKCg55Qgp0cakLz0iu36Ofl0Cv5lea9O0vMaJcakLz0O:VES34I50cakcd36OfmCv5lea9O8bJcaw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5955d3f3296a1911ea3dfddc7cebc458
Files
-
5955d3f3296a1911ea3dfddc7cebc458.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE