Behavioral task
behavioral1
Sample
5a9763f96e0ba8b01d808f49bf9cda7ebc2a645cd06208dc4daf4894edb2c2d7.exe
Resource
win7-20240508-en
General
-
Target
5a9763f96e0ba8b01d808f49bf9cda7ebc2a645cd06208dc4daf4894edb2c2d7
-
Size
15.5MB
-
MD5
b0f681e9ce2c0f28137e3fa5dc0db40e
-
SHA1
0dd707a7d436265185fafb7b74e2516973f6f8be
-
SHA256
5a9763f96e0ba8b01d808f49bf9cda7ebc2a645cd06208dc4daf4894edb2c2d7
-
SHA512
4d07e9f9b8ea0073aad972b50e1a5ed6b7a39be4653a149820d58a7826d15cc74a69496040c38f00a912c2e1132578133975f4131838fd8a7547eaa8bca45f78
-
SSDEEP
393216:h+rfAuLKEdSP3Rk6zFd+Kvu1gHCw7WvdOIIY+JszA:Qrfu13f6KvagHCw7md+he
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a9763f96e0ba8b01d808f49bf9cda7ebc2a645cd06208dc4daf4894edb2c2d7
Files
-
5a9763f96e0ba8b01d808f49bf9cda7ebc2a645cd06208dc4daf4894edb2c2d7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15.5MB - Virtual size: 15.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE