Behavioral task
behavioral1
Sample
b5623703deb59fcba08167d1652a1292.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5623703deb59fcba08167d1652a1292.exe
Resource
win10v2004-20240226-en
General
-
Target
b5623703deb59fcba08167d1652a1292
-
Size
1.8MB
-
MD5
b5623703deb59fcba08167d1652a1292
-
SHA1
651c7623418dbd454f1f0fe6d687fdcf4c115d0d
-
SHA256
a3e9aed950d1489c6570b52012d287fd5368683905d0b3c28e653b4cbc8ccaac
-
SHA512
31b08d17f0369414e919f910f7b459b08273c2fed882d9f8c7b46a88f25ef06e67280b1f3d26f91ebc2543da8af1caf3530cd9f396859d6eec4e2df25cf9a463
-
SSDEEP
49152:hfbFjU66CSCG7Jf0UXOf6r6vgVlQC73aDB9:NRj96CSjB0UC6r64bQ63aDB9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5623703deb59fcba08167d1652a1292
Files
-
b5623703deb59fcba08167d1652a1292.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE