Static task
static1
Behavioral task
behavioral1
Sample
5809e619259b720a1ca9faba9262022ebf0d4daaf1f9eb67c139598e03437fee.exe
Resource
win7-20240611-en
General
-
Target
5809e619259b720a1ca9faba9262022ebf0d4daaf1f9eb67c139598e03437fee
-
Size
134KB
-
MD5
9203d5a8723565c4e341335038f12ac2
-
SHA1
8a1dd42a1fbab61abf86cbe0bd9cd87fabe78c79
-
SHA256
5809e619259b720a1ca9faba9262022ebf0d4daaf1f9eb67c139598e03437fee
-
SHA512
6291a16efbdb8c5d3594bc84ddbe43d927a7222ecf1ab0c37208fd8eee9a6bf4b218fac17646f107d2b90d387d805dac20bec8bcdcb6606b79cf11b4cb007364
-
SSDEEP
1536:4DfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:eiRTeH0iqAW6J6f1tqF6dngNmaZCia
Malware Config
Signatures
-
Detects executables built or packed with MPress PE compressor 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_MPress -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5809e619259b720a1ca9faba9262022ebf0d4daaf1f9eb67c139598e03437fee
Files
-
5809e619259b720a1ca9faba9262022ebf0d4daaf1f9eb67c139598e03437fee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE