Behavioral task
behavioral1
Sample
55d8d79b3f15e00fe8d95ddd5fc7affd08299d6f8d288f1a1a65a0c1ef66f349.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
55d8d79b3f15e00fe8d95ddd5fc7affd08299d6f8d288f1a1a65a0c1ef66f349.exe
Resource
win10v2004-20240412-en
General
-
Target
55d8d79b3f15e00fe8d95ddd5fc7affd08299d6f8d288f1a1a65a0c1ef66f349
-
Size
2.5MB
-
MD5
3c09b2cb0a04896141166c99743f9e74
-
SHA1
9c097bb0c8eb80e8cb12f971c76e41d5e97c6afc
-
SHA256
55d8d79b3f15e00fe8d95ddd5fc7affd08299d6f8d288f1a1a65a0c1ef66f349
-
SHA512
1bbf2ca135cd1e7555ccaa00c29e3aa07756efa7d8aa4ce6d2035a67ac8363d2fb177f83a723c468806bde8bed0f0ff285d1c123c18a6b59f3c776c31de91726
-
SSDEEP
49152:EQPP/iKvXXkS+Uu4FFuCTGjSuscNHQrUEhqBfLD1HPCJtYFFk:9PP/iANi4mscNCufFPCJtmk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55d8d79b3f15e00fe8d95ddd5fc7affd08299d6f8d288f1a1a65a0c1ef66f349
Files
-
55d8d79b3f15e00fe8d95ddd5fc7affd08299d6f8d288f1a1a65a0c1ef66f349.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE