Behavioral task
behavioral1
Sample
5c3d142ccbd68ef8e6f0c974f25e9465.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c3d142ccbd68ef8e6f0c974f25e9465.exe
Resource
win10v2004-20231215-en
General
-
Target
5c3d142ccbd68ef8e6f0c974f25e9465
-
Size
2.6MB
-
MD5
5c3d142ccbd68ef8e6f0c974f25e9465
-
SHA1
7742baba3ea92e2bb10a5678fb0b2cfae69b5506
-
SHA256
5dd9050a5b5124caa261edb541ed7aa44c67f0a74e7028dab9c6c04256d3a550
-
SHA512
5f4c785355fff1fcae9eef6c53d607637c65746627a06c5cab31eaafa3a9c94a45dfc0602f2f6dbf9cc28c0670fc83f78aa1d740c77034024fedce672a27b6b0
-
SSDEEP
49152:73Cl9WI9a4nrRcgr1njJqj3kbf9OiDads4LE5T9ay3:sy4nrFZUMVOzad3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c3d142ccbd68ef8e6f0c974f25e9465
Files
-
5c3d142ccbd68ef8e6f0c974f25e9465.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE