Behavioral task
behavioral1
Sample
5b1f41613a7d77b6f6df6b8b7519b20ce1bc445350adfaa599eae68bdb8c0e53.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5b1f41613a7d77b6f6df6b8b7519b20ce1bc445350adfaa599eae68bdb8c0e53.exe
Resource
win10v2004-20240426-en
General
-
Target
5b1f41613a7d77b6f6df6b8b7519b20ce1bc445350adfaa599eae68bdb8c0e53
-
Size
9.0MB
-
MD5
d1c660cd4b262b29817e4641822f9d1b
-
SHA1
b513a8671b8b85be7deded53f3a4fd58427aac6f
-
SHA256
5b1f41613a7d77b6f6df6b8b7519b20ce1bc445350adfaa599eae68bdb8c0e53
-
SHA512
da520be55dfab84991d39db1c4c70300e6bcb748ee9da502b2c0601c0b747a99a03bdd38633459b74ccf8956ad192f3c6f1da53509e82658d88d52e1c04f80e4
-
SSDEEP
196608:fX4pdCVjeWAxKpXAefMIbPmIvIvLJU51Mw5wIH8HdvHy:fXY8AcJMuPnv0Jhw6IcHA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b1f41613a7d77b6f6df6b8b7519b20ce1bc445350adfaa599eae68bdb8c0e53
Files
-
5b1f41613a7d77b6f6df6b8b7519b20ce1bc445350adfaa599eae68bdb8c0e53.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 11.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8.9MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE