Behavioral task
behavioral1
Sample
5ab54f7a92fbd1f2b992cdc256052c77.exe
Resource
win7-20231129-en
General
-
Target
5ab54f7a92fbd1f2b992cdc256052c77
-
Size
784KB
-
MD5
5ab54f7a92fbd1f2b992cdc256052c77
-
SHA1
bdff1fe7e4fc5411e53c9935ee3600760154b11f
-
SHA256
981f4afac0b00b7f1b6af633a707bb6474e7bc4676e98817ca0d94cdb1ca3a96
-
SHA512
c7a4519a9f12cd33dc4a5e8d837fc89c506d3989f32e9e99feec968f82f203d9533821f34277d266548fdc4e801c1cdd3cb842606c8b3d510d2d9241b09465c8
-
SSDEEP
24576:i/N2ZhZDVS7q0+/HGhS4mLgQ06Rg5G9iq5LgmN1R:aNIxSEaBYgcRg54i8r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ab54f7a92fbd1f2b992cdc256052c77
Files
-
5ab54f7a92fbd1f2b992cdc256052c77.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE