Behavioral task
behavioral1
Sample
5e1a91577bb1bb1f094aa101fa9f39887d44dbd4d66660b9b80faafdecad4c3c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5e1a91577bb1bb1f094aa101fa9f39887d44dbd4d66660b9b80faafdecad4c3c.exe
Resource
win10v2004-20240426-en
General
-
Target
5e1a91577bb1bb1f094aa101fa9f39887d44dbd4d66660b9b80faafdecad4c3c
-
Size
3.3MB
-
MD5
62e91b41f803da3ad1a9892c181d32ad
-
SHA1
eacf2a7757af5a1f36a713c3ae01983076343f3c
-
SHA256
5e1a91577bb1bb1f094aa101fa9f39887d44dbd4d66660b9b80faafdecad4c3c
-
SHA512
e43005eb56d36eab65ae17c7a618bf3a47ec6fada1b3661c9dd53ca0e16e01276ac9738fb5e10c1839ed882c6238c58cefd9c8eebb51ad0ec4068245ad53278b
-
SSDEEP
49152:XCEYYZRCr9MaCCRrifNuXVsmH/GFHnlaDIHzFuH/Ox40GkaRq2arLt3VIEwi:XpZRkMTC99xDIHQfOFa8rZ3u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e1a91577bb1bb1f094aa101fa9f39887d44dbd4d66660b9b80faafdecad4c3c
Files
-
5e1a91577bb1bb1f094aa101fa9f39887d44dbd4d66660b9b80faafdecad4c3c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE