Behavioral task
behavioral1
Sample
5b4f6d3c853a46b974ae6283836cf01d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5b4f6d3c853a46b974ae6283836cf01d.exe
Resource
win10v2004-20231215-en
General
-
Target
5b4f6d3c853a46b974ae6283836cf01d
-
Size
110KB
-
MD5
5b4f6d3c853a46b974ae6283836cf01d
-
SHA1
2d4d33edfada00805f4c68ef71394d2b03f6f251
-
SHA256
141858243d03485d4edb4b34f0283fc92b1b3f85dde6dbf0f792995a5fb1eb95
-
SHA512
d1547c35a335a0c2d076c44481bab005b0d37868538d00ad6903c65fe9cdde74cef4f5d5fae01f454e739db95ab561c407b3bd478d8efe32e1ad2795f54e2cd2
-
SSDEEP
3072:6UzzzzztQzzzOzzdqzZXP6eU60zzzzzzzzzzzzzzzlRv7K11PBopMzzzzzzzzzzI:6UzzzzzSzzzOzzdqzZP6X60zzzzzzzzQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b4f6d3c853a46b974ae6283836cf01d
Files
-
5b4f6d3c853a46b974ae6283836cf01d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE