Behavioral task
behavioral1
Sample
5b54943a7e20f8ae65bf06cc932a2cba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b54943a7e20f8ae65bf06cc932a2cba.exe
Resource
win10v2004-20231215-en
General
-
Target
5b54943a7e20f8ae65bf06cc932a2cba
-
Size
2.7MB
-
MD5
5b54943a7e20f8ae65bf06cc932a2cba
-
SHA1
14f2735cb23eb657232adbee66ac383a1ce093ca
-
SHA256
6c3ff8a91d6a6df9352489be1700475528af64cec22fbcfd5c9cbe6c862c3441
-
SHA512
ad8320e0fbeb3baf200913bc01aad6b9769545daa7f9497ff09fec26b10c2e2979b5b48885f1e5880a11613df321906a69ca0962b79ad54b1ea1f5716ff48ac4
-
SSDEEP
12288:9lhTqkew1rdDJ+3seY8laVi6ZjdIrmTHSbkamx6t/WQnezoSR:9KkdPeNs0e3HqROhj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b54943a7e20f8ae65bf06cc932a2cba
Files
-
5b54943a7e20f8ae65bf06cc932a2cba.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 197KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE