Behavioral task
behavioral1
Sample
5bfd78bced71dbab1a14d6b2c4282e1a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bfd78bced71dbab1a14d6b2c4282e1a.exe
Resource
win10v2004-20231215-en
General
-
Target
5bfd78bced71dbab1a14d6b2c4282e1a
-
Size
208KB
-
MD5
5bfd78bced71dbab1a14d6b2c4282e1a
-
SHA1
6c42e977cbfcbc19e157b77d36e6eacb7846cc86
-
SHA256
056da63b22afcd3adff79b4da85d0a672bb0bd9a6674c37b77f991e20bf0fb4a
-
SHA512
77ab53248a39b5a9cfb38de9d40be5b8da65ee54f55c8df17baccc582c4288db09063e1548084ff391194d7be3f00b93bd224d3c69332f7e5ee20c238899509e
-
SSDEEP
6144:TqchxygjVJbRE6g6fM2W/RrbwgS1o2x2XJoS:mqIgj3bRGSgyxUoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bfd78bced71dbab1a14d6b2c4282e1a
Files
-
5bfd78bced71dbab1a14d6b2c4282e1a.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 204KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE