Behavioral task
behavioral1
Sample
5b05726c84df8978dd41f98632361295.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b05726c84df8978dd41f98632361295.exe
Resource
win10v2004-20231215-en
General
-
Target
5b05726c84df8978dd41f98632361295
-
Size
93KB
-
MD5
5b05726c84df8978dd41f98632361295
-
SHA1
e9bb45d134ac0b7d2ca13189d216adc6c4c64242
-
SHA256
e23f27647f00bee861fb3934e11a51cdbd1622182d27f93e22c864a50a63ee14
-
SHA512
4f2da79d5b6677e6d836b4f1ce29eed3c8cafb479c7a87bd1a0c22af9b683460b98e093d66e82af36921ee3ea091dfb4731858bfe4e36f638d851d065f5a1be4
-
SSDEEP
1536:S36decjAT8MLNdcXgk88eG2uSZuNqZxCyZgx3zIOOk3dydcLWsP5bgH1Qb/nRpF/:S30jA/HJkneG2kqpgRIw3AdfshIQb/cY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b05726c84df8978dd41f98632361295
Files
-
5b05726c84df8978dd41f98632361295.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE