Behavioral task
behavioral1
Sample
5b2700489100ad5dbc0b7e21cf3953ba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b2700489100ad5dbc0b7e21cf3953ba.exe
Resource
win10v2004-20231222-en
General
-
Target
5b2700489100ad5dbc0b7e21cf3953ba
-
Size
359KB
-
MD5
5b2700489100ad5dbc0b7e21cf3953ba
-
SHA1
2248605f485fbc48c41c6eab2c773dc27c68de76
-
SHA256
e7f875cc9c867643d30dab68d68a542fc0560ffc8885fc5f9fc266e520c9fced
-
SHA512
9daef162586ba5de53df7294790289116c215836d96156bbc7e6d4e14efd951ca7ebe6e16cd5d8959b4e1e0a2099497118ce454c1c4817b4466d17f11f112c56
-
SSDEEP
6144:ZgRyiIWQFpUv4/B+FrM144XlzKlUAzYYbuewX79GtPuB8PxwPh79i5s/CoS9iP6v:3iMCv45+uK4VKXknewr9GBY85wPTi5sk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b2700489100ad5dbc0b7e21cf3953ba
Files
-
5b2700489100ad5dbc0b7e21cf3953ba.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 712KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 318KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE