Behavioral task
behavioral1
Sample
653d3be0759bbb121a37398545d55e38c215b45ac33bbde065e9a7169a5b7709.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
653d3be0759bbb121a37398545d55e38c215b45ac33bbde065e9a7169a5b7709.exe
Resource
win10v2004-20240508-en
General
-
Target
653d3be0759bbb121a37398545d55e38c215b45ac33bbde065e9a7169a5b7709
-
Size
2.0MB
-
MD5
4981d406b5936dd98bc805f00b4e3ac7
-
SHA1
753dd837b540e3947358acc6d7180a974c9eb15b
-
SHA256
653d3be0759bbb121a37398545d55e38c215b45ac33bbde065e9a7169a5b7709
-
SHA512
12520d1a6c600afa8fe743008230d150a228ece2ae919835f55d6c1b859afe9ba91b32ded29b8ab7dd40affe28b5f8dbbf0fffb0ced98af15b8ab1cda0e38e29
-
SSDEEP
49152:VIeoZvwL5N7LUl20EpagJDrh77/W3zWY33ZnedtDL5ycm+FJfg:Sf98NUlbyJ577/hcnedtDtw+7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 653d3be0759bbb121a37398545d55e38c215b45ac33bbde065e9a7169a5b7709
Files
-
653d3be0759bbb121a37398545d55e38c215b45ac33bbde065e9a7169a5b7709.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE