Behavioral task
behavioral1
Sample
5cd5ff9326b214659b20e3a3282fb38f2cba15b7545e96b3a371c95f5f7705c5.exe
Resource
win7-20240704-en
General
-
Target
5cd5ff9326b214659b20e3a3282fb38f2cba15b7545e96b3a371c95f5f7705c5
-
Size
171KB
-
MD5
04dda71e761a6e12631b8b944649d94b
-
SHA1
a423a44096b71b6b1928fb1078954ac294eeb9a5
-
SHA256
5cd5ff9326b214659b20e3a3282fb38f2cba15b7545e96b3a371c95f5f7705c5
-
SHA512
b08e39ea12b725f489917cc662f9f901073fcdef5e7ffb6cd973a9a495abf5584417f6e2b5f73682dbf47666d5dd00f9fa4ca576d4df94d93177d98a1d13ffe5
-
SSDEEP
3072:Cjp/gDfpkzmM+GidJsTuC02gFDKe09CgGYVKE6TNOTnZsVf7WSaI/Uzouti:Cjp/3id87keeCCgGYaTNOT2Vf7WI/EoH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cd5ff9326b214659b20e3a3282fb38f2cba15b7545e96b3a371c95f5f7705c5
Files
-
5cd5ff9326b214659b20e3a3282fb38f2cba15b7545e96b3a371c95f5f7705c5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 660KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 168KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ