Behavioral task
behavioral1
Sample
5bcddcfa0cac1dc4177aa9ef56d4d950N.exe
Resource
win7-20240704-en
General
-
Target
5bcddcfa0cac1dc4177aa9ef56d4d950N.exe
-
Size
1.5MB
-
MD5
5bcddcfa0cac1dc4177aa9ef56d4d950
-
SHA1
e1615c0bb7b9da9903ea5bdeeb11455f6694fa08
-
SHA256
c718c720534a2f77ac665ec29dff518876a9a80a0b392252bbeb08f28cf96cb0
-
SHA512
bb4bbc686a0d92a4fe4e8099aa3b900447a2cb3e7d484066faad88f74eb9dc29dfabde46d472b1be5e5dd5ff6b15c9b713ba36e86b7e305580039f26eeb0f6f8
-
SSDEEP
24576:SHNg5XTt/BeYKUIg5bvSXPjRBz57OYKUIg5bvSXPjRL:QNg5B/Q4ZlcRzK4ZlcRL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bcddcfa0cac1dc4177aa9ef56d4d950N.exe
Files
-
5bcddcfa0cac1dc4177aa9ef56d4d950N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE