Behavioral task
behavioral1
Sample
5b3410716f3f9f6a5f04b176eb363a52.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b3410716f3f9f6a5f04b176eb363a52.exe
Resource
win10v2004-20231222-en
General
-
Target
5b3410716f3f9f6a5f04b176eb363a52
-
Size
2.0MB
-
MD5
5b3410716f3f9f6a5f04b176eb363a52
-
SHA1
3f257d42997ef0d2862afd0c0a4551afe568d3b9
-
SHA256
1ada1eaeda205a2aaace71c17dadf7c7582b5c48314e1889dbd5b2a36817c5cd
-
SHA512
77b7319a4d50e1e295de7da72fd0aa1e31d4fb1984c0ecf99aacebf94afe7e62d91168ee4d9a4df097b7139fb1de4584f31b9c7a0e6ba03f4f079783274dcdf4
-
SSDEEP
49152:N+WCUkzQcakLz0ibq6yqh4cCTiP36hyhTzVL2cakLz0ibq6yqh:N+WCrQcakcibiqh4cCT43qyhtL2cakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b3410716f3f9f6a5f04b176eb363a52
Files
-
5b3410716f3f9f6a5f04b176eb363a52.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE