Behavioral task
behavioral1
Sample
5c18f71edba770c3246e283714bf04fad87ab8a6a2dc0517c36a4a673c2cb0fd.exe
Resource
win10v2004-20240611-en
General
-
Target
5c18f71edba770c3246e283714bf04fad87ab8a6a2dc0517c36a4a673c2cb0fd
-
Size
647KB
-
MD5
edf3b44154c439f2f8d1810a6d9dfc11
-
SHA1
446ab5e1ed3638a5ceab6d1410784bfebb125cca
-
SHA256
5c18f71edba770c3246e283714bf04fad87ab8a6a2dc0517c36a4a673c2cb0fd
-
SHA512
866762fadb858ffb0795dba1823283607eaaddbdcfe130c2a588448e8214c433e81108109b334cf357555f3e813bb98e9bff8d943c0f1b25fa7ae8564fe065ba
-
SSDEEP
12288:xNXox8Cq68AiNWXyvEvRX8te3KljhVqTmR/rrfU6TYHpNqsSazEJ7gVSNQ/TvikN:3jNWXykathBRjrfU6TYJNqfZ8My/Tvl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c18f71edba770c3246e283714bf04fad87ab8a6a2dc0517c36a4a673c2cb0fd
Files
-
5c18f71edba770c3246e283714bf04fad87ab8a6a2dc0517c36a4a673c2cb0fd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 940KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ