Behavioral task
behavioral1
Sample
5afcebb679247caaeeae4f1891e76952.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5afcebb679247caaeeae4f1891e76952.exe
Resource
win10v2004-20231215-en
General
-
Target
5afcebb679247caaeeae4f1891e76952
-
Size
1.3MB
-
MD5
5afcebb679247caaeeae4f1891e76952
-
SHA1
0ba281d487d76f4b667ceb32c1f334aece831377
-
SHA256
1c66c9e931f5d387fd8d68b1d4327891d5f7da3cc71d7464123680ebd28d18e6
-
SHA512
bf0fc1a9bffca522d9ba9f623af0083edef69f25a7b7c9acf8886a8476f8d33165e01f7a391a77d6cd141be476c48ccff14b8d4c1e83b46ccef4c6836f8d9ebc
-
SSDEEP
24576:D5mfRVDp7TuVerkYdgAkQ/DHwi5v50KIEjJhAD9PB7YAJwlyvG:gZVDFgGkYdTLHH5eKrJQtiYw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5afcebb679247caaeeae4f1891e76952
Files
-
5afcebb679247caaeeae4f1891e76952.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE