Behavioral task
behavioral1
Sample
5bf8d5c3b7d804f610460597d8e9ae56.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bf8d5c3b7d804f610460597d8e9ae56.exe
Resource
win10v2004-20231215-en
General
-
Target
5bf8d5c3b7d804f610460597d8e9ae56
-
Size
133KB
-
MD5
5bf8d5c3b7d804f610460597d8e9ae56
-
SHA1
885fb564643e15f89b924750f1a7a5e31c53eaf5
-
SHA256
c31690c1083e0fcc5e3d8d3a2cdcc8651a0edb27e6d02064138be4dabdee73b6
-
SHA512
18c100333d2c6c1edfc07ee99c437c5ccbe940f726fdc6bd3152f3afbb0d72d1cb052a1a269cb33b125fc5d32ba8afa89804dca73ab6b471e43e09c6351f75d4
-
SSDEEP
3072:kAwcdChnBFKj5WuDJVLVGi9YYeKp8Vei9AtEuhj3U/M0fQ:kAw/VBFKjFDTA8YYmc2AtEu13UvQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bf8d5c3b7d804f610460597d8e9ae56
Files
-
5bf8d5c3b7d804f610460597d8e9ae56.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE