Behavioral task
behavioral1
Sample
5b027edb6e0eda7cf462492f84f52e0a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b027edb6e0eda7cf462492f84f52e0a.exe
Resource
win10v2004-20231215-en
General
-
Target
5b027edb6e0eda7cf462492f84f52e0a
-
Size
1.3MB
-
MD5
5b027edb6e0eda7cf462492f84f52e0a
-
SHA1
63e562f5afae5e4a8573fce2b24392617728d233
-
SHA256
2863f713c6ff5af958154cebeffadb85328d0199ec05fd875d5009bf5691da67
-
SHA512
21babf59206e7967b96c45e6f479dca5130bfbe31e6a73a770c52ab987e86d79b3854e961a49e95babe22481e81754bfef1c77ef8cedb42d1d1cb2d63c0cccd6
-
SSDEEP
24576:ZmEczwZK2uhCq20RdCW6xPXN+gVVQDYLFQ8w1HhDBZQ1pZU9/9Us:ZhpZKzhT8PXN+ypLFQn1HVwpaR9j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b027edb6e0eda7cf462492f84f52e0a
Files
-
5b027edb6e0eda7cf462492f84f52e0a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE