Behavioral task
behavioral1
Sample
5c465cfa84e8b92e7a13b5eb16600ddd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c465cfa84e8b92e7a13b5eb16600ddd.exe
Resource
win10v2004-20231215-en
General
-
Target
5c465cfa84e8b92e7a13b5eb16600ddd
-
Size
133KB
-
MD5
5c465cfa84e8b92e7a13b5eb16600ddd
-
SHA1
ad824d559b4c545f00e92d28d9363f1fb40bed73
-
SHA256
16d61b8f3dd96ed3ebca0a41edf5baf202d201cbf290a7918f9511746293063d
-
SHA512
b781f8ac4835aadb739fb791d5ec9a77f85176cdc8bb820aa84a2c46fb6455e12821fd4ab1549a94a44bbaf9d74834a85dac0c92bc928b3c355d5a11829d327a
-
SSDEEP
3072:Ftd7BX2w2UZLnP8eEU/7QTk/mt6gYMwF6W+oorXxhfl7W4fwBOgQ:FtFBX2LaP8eZ/7Q6m1wF6fFrXxFzfwBI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c465cfa84e8b92e7a13b5eb16600ddd
Files
-
5c465cfa84e8b92e7a13b5eb16600ddd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE