Behavioral task
behavioral1
Sample
5bd4c79c296c4d57c93f2b9078e23300.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bd4c79c296c4d57c93f2b9078e23300.exe
Resource
win10v2004-20231215-en
General
-
Target
5bd4c79c296c4d57c93f2b9078e23300
-
Size
1.2MB
-
MD5
5bd4c79c296c4d57c93f2b9078e23300
-
SHA1
e32664b7b44de480a4954d21aa050e948cde6011
-
SHA256
60b21da9f5a39a316b1fb9055f48e6f9f9edc15b9ae6b7dd08efa5c1094216f3
-
SHA512
c001a7f971db7ebcccf40a881d7c3c8c535f9137d2b710001f69cbf523a8434ef657043ba9949823d5ab72a8cc11ee7e145961abbb2a5edb224e356db01ea93c
-
SSDEEP
24576:K+iB3+vpjl888Eas8u5MlOzGmPWuv1iF8hm1EwSCX8VqqSmGnl48cZia1lNwp:KD0pjG8/8MtymP8OwuBC9NmGlhq16
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bd4c79c296c4d57c93f2b9078e23300
Files
-
5bd4c79c296c4d57c93f2b9078e23300.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE