Behavioral task
behavioral1
Sample
5e97aa3cdc85664da07e9990c5a27d40405ca94c3b00176c46525f0bd5cb3cfb.exe
Resource
win7-20240221-en
General
-
Target
5e97aa3cdc85664da07e9990c5a27d40405ca94c3b00176c46525f0bd5cb3cfb
-
Size
7.1MB
-
MD5
91c1c0e9b72d654ab9b63b8970a003e1
-
SHA1
2006b01756c642ccec5043bd0a74f9def186e02e
-
SHA256
5e97aa3cdc85664da07e9990c5a27d40405ca94c3b00176c46525f0bd5cb3cfb
-
SHA512
cbed068af34021c4497a27c2c53239be73f83b8281f384f0393aaa32f88dfabe7a2ac21d410de885c3a4448f5a54a89557b2ab934cf5843675e525796a5df8cb
-
SSDEEP
196608:8Rv44PsUEXAy8rZbQxE129FX2knR1+oSZ7maSAU2Jj48KTOI:CP3EqZMxM29dRct7HjJ0AI
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5e97aa3cdc85664da07e9990c5a27d40405ca94c3b00176c46525f0bd5cb3cfb
Files
-
5e97aa3cdc85664da07e9990c5a27d40405ca94c3b00176c46525f0bd5cb3cfb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 14.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE