Behavioral task
behavioral1
Sample
5bbd120adc989b88e2d16e924d1d22ba.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5bbd120adc989b88e2d16e924d1d22ba.exe
Resource
win10v2004-20231215-en
General
-
Target
5bbd120adc989b88e2d16e924d1d22ba
-
Size
3.2MB
-
MD5
5bbd120adc989b88e2d16e924d1d22ba
-
SHA1
17fed8aafac7c5dafc51b21746f84c168d1511e6
-
SHA256
178a0f1bb05198b0a0db43ff7c186a41b7de6c2abee1bdeadba16d6415256be3
-
SHA512
7e29b74efc3842e9898bb5e2c0c635718892b95f29ccbdb2da37c7b89e261c78aa1a13fe7c03043519f0d095ac081161c4e58cf178be71968f484fac32bd8037
-
SSDEEP
98304:sRq3sVUkkScakcNGkwhgjtncakcZJ1JQeF6WMBcakcNGkwhgjtncakcO:sBUkjdlNGkwhgjldlZJ1CeL2dlNGkwhz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bbd120adc989b88e2d16e924d1d22ba
Files
-
5bbd120adc989b88e2d16e924d1d22ba.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE