Behavioral task
behavioral1
Sample
51b1e8072a86e05e534dbbf8c1f4d1b6c6f50a290aca23ce6017d80ecc761ba7.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
51b1e8072a86e05e534dbbf8c1f4d1b6c6f50a290aca23ce6017d80ecc761ba7.exe
Resource
win10v2004-20240709-en
General
-
Target
51b1e8072a86e05e534dbbf8c1f4d1b6c6f50a290aca23ce6017d80ecc761ba7
-
Size
995KB
-
MD5
d80b0cace2465b91291c536804576c74
-
SHA1
64ce8e4c9b67a37d3b2f00764a577abe90c9818d
-
SHA256
51b1e8072a86e05e534dbbf8c1f4d1b6c6f50a290aca23ce6017d80ecc761ba7
-
SHA512
509f79d08c89cf4b3cf14a78cc51e0f4a498b730f09ee57734f7d78e5842a31cc4f358eb51c8691c391a9a4a55f2ec76a81ff85d273af4f57d05216bf6a2e799
-
SSDEEP
24576:ll3eIcEXSqji+5wQk4Cp2ZdjrmQgCSgq+:3LcEiqG+6B2ZJKQVSgq+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51b1e8072a86e05e534dbbf8c1f4d1b6c6f50a290aca23ce6017d80ecc761ba7
Files
-
51b1e8072a86e05e534dbbf8c1f4d1b6c6f50a290aca23ce6017d80ecc761ba7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8xGaDB Size: 388KB - Virtual size: 224KB