Behavioral task
behavioral1
Sample
5c1e76048e0f191c44de22640166cb47.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5c1e76048e0f191c44de22640166cb47.exe
Resource
win10v2004-20231215-en
General
-
Target
5c1e76048e0f191c44de22640166cb47
-
Size
3.9MB
-
MD5
5c1e76048e0f191c44de22640166cb47
-
SHA1
f645771e71b7da721e423ee78cb658601eb8b4c3
-
SHA256
d2302eb1e163569ff8382016f03ac8887ca204447278bfa4c6f25f304f001737
-
SHA512
b0192d35993dd92f0bc44e9ee8f71ddf28f688ff0f2453c6d61ad5bffd937a0717d45ed6b83612aef9b6cc551deb64b6ee4dde4e4fc62e4c062d273d5b16ebb6
-
SSDEEP
98304:5o33UlksEycXy67D2i7D3xkOxYwpKvNpVdbQOD2i7D3xkOxYwpKkRAIwywj92WD7:5oUGsEycCUh7FkNqK5pzh7FkNqKQpSTn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c1e76048e0f191c44de22640166cb47
Files
-
5c1e76048e0f191c44de22640166cb47.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE