Resubmissions
03-06-2024 05:31
240603-f75eksdc3yGeneral
-
Target
51887aeb36fc899ae1a9696f022e9c71dacacbcd51f88d65dcdf4f7d1a2d3b97
-
Size
12.9MB
-
MD5
e28a5f2ace32c0239f724f91c80a16c5
-
SHA1
11dd45f9abfae2fe1668513b920461d06724184e
-
SHA256
51887aeb36fc899ae1a9696f022e9c71dacacbcd51f88d65dcdf4f7d1a2d3b97
-
SHA512
19bf1098627e28e045affca39145916b34ca410863cff1cf3e7365b013e593229d5bfc73e6273d6069fe9d3d8e2424c297c06cdde1112cf3f630dd48c41406cc
-
SSDEEP
393216:ZBU7/uRljVlo6jNdi6Jg2Q6RcwCwbCh8tdj4RDsW:e/uVXbi6O25Vb88th4R
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 51887aeb36fc899ae1a9696f022e9c71dacacbcd51f88d65dcdf4f7d1a2d3b97
Files
-
51887aeb36fc899ae1a9696f022e9c71dacacbcd51f88d65dcdf4f7d1a2d3b97.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 35.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12.8MB - Virtual size: 12.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE