Behavioral task
behavioral1
Sample
5bb9c8029c3b82cff850a8d190c2c310.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bb9c8029c3b82cff850a8d190c2c310.exe
Resource
win10v2004-20231215-en
General
-
Target
5bb9c8029c3b82cff850a8d190c2c310
-
Size
10.2MB
-
MD5
5bb9c8029c3b82cff850a8d190c2c310
-
SHA1
8a4b5aee6d25920b3e6f24b6dfb6c9b06e1145fa
-
SHA256
4a6cb2b90ec92b2fefdb780c2c1999d855cce4818d29f6db4e0cf6858281393d
-
SHA512
11bdaf66f34ad66c89557020c086c755a608085ec3c43d7210fe3d615edc744fce8187a975ff5a48cd05f1610ee82fe91cca8cd77310dba863b03636f8611f8e
-
SSDEEP
98304:O4z8N85zRrWn3kyuqJ3S11qronI0Iy5fKP7grvYLS3hhZTjGO+qkNDX4Rip3S11P:lz8N85zA3kyuq0a0j9FjGTqKuda0j9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bb9c8029c3b82cff850a8d190c2c310
Files
-
5bb9c8029c3b82cff850a8d190c2c310.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE