Behavioral task
behavioral1
Sample
5365402f4b0885e8a9e4c0227e5fcf40N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5365402f4b0885e8a9e4c0227e5fcf40N.exe
Resource
win10v2004-20240802-en
General
-
Target
5365402f4b0885e8a9e4c0227e5fcf40N.exe
-
Size
517KB
-
MD5
5365402f4b0885e8a9e4c0227e5fcf40
-
SHA1
1de122b8340534522951716afff374b5dbc7af4e
-
SHA256
9153b1aa00a9f8cbae4b64a5e1d5c3af6e314990a5d8daf9dd6f019be19c11f0
-
SHA512
e5e8b5a7c4c0f4e0c71ed45b0c6403146c4852c70c6909fde6d088f4b40ecd11d8e2f359fe5518204b186ed939e0f1455be8fcab965b58dc44678a2b7d78b635
-
SSDEEP
6144:QdspDeDrxkg/vrMuJIgwhEFHyOrJcX/Pgqwzm5IzkWjS4e4azExBKO1t4Kb70NqT:28kxNhOZElO5kkWjhD4AOj5lG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5365402f4b0885e8a9e4c0227e5fcf40N.exe
Files
-
5365402f4b0885e8a9e4c0227e5fcf40N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE