Behavioral task
behavioral1
Sample
5b1c6d6712041b114dffbb54f42f66ca.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b1c6d6712041b114dffbb54f42f66ca.exe
Resource
win10v2004-20231222-en
General
-
Target
5b1c6d6712041b114dffbb54f42f66ca
-
Size
852KB
-
MD5
5b1c6d6712041b114dffbb54f42f66ca
-
SHA1
5c635561350679a5190170625b7e81af088c1ccc
-
SHA256
b78498d31871b40fde70f844c3d52f08c816e359a59acfe15dddcebc362e147b
-
SHA512
9d0978feb30e1f22d25d6acfe120abd9c6bf07c27566f0a579eb763ef46eff707ebe9e0a40706312cf3fed354252d619469ddc9f6b599c9ee90fdc020ea5c060
-
SSDEEP
24576:5FNm0pkFA+LfTCZa/xlCwV016hslk4SnqNS:5Fk0pkFA+Lb/xsT16hh4MqN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b1c6d6712041b114dffbb54f42f66ca
Files
-
5b1c6d6712041b114dffbb54f42f66ca.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 834KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE