Behavioral task
behavioral1
Sample
53ff6b290a91471e567c145c5ea587e3958df4353251193d21bb22483b49cf69.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
53ff6b290a91471e567c145c5ea587e3958df4353251193d21bb22483b49cf69.exe
Resource
win10v2004-20240709-en
General
-
Target
53ff6b290a91471e567c145c5ea587e3958df4353251193d21bb22483b49cf69
-
Size
43KB
-
MD5
ce3684006ef468d4f8cc78b6df3b8bd0
-
SHA1
67001e5067a2f023a02d6c070eb99fe34d538bcb
-
SHA256
53ff6b290a91471e567c145c5ea587e3958df4353251193d21bb22483b49cf69
-
SHA512
e2bbbf49d4b1aa049cb1bfcb1dc4c65b1995bd9e0d0b18f0cc52e594553427e4e5b1f46fd60374b609871f85eab509b7cea38ce95685808cc0db59816caaff73
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBw:V7Zf/FAxTWoJJZENTBw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53ff6b290a91471e567c145c5ea587e3958df4353251193d21bb22483b49cf69
Files
-
53ff6b290a91471e567c145c5ea587e3958df4353251193d21bb22483b49cf69.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE