Behavioral task
behavioral1
Sample
5adccb5ce7c85faf4c70994d40963796e3e8415820e3638cd0422f53e1363d52N.exe
Resource
win7-20240903-en
General
-
Target
5adccb5ce7c85faf4c70994d40963796e3e8415820e3638cd0422f53e1363d52N
-
Size
133KB
-
MD5
a5ada39d8f629a9207b4363d3cde87e0
-
SHA1
b95f6b76e77afe06ab52328242c5ff9cca5bc44e
-
SHA256
5adccb5ce7c85faf4c70994d40963796e3e8415820e3638cd0422f53e1363d52
-
SHA512
cd1e0fbf55c6a0d21506e894588e5d7a611c36a1a1c805d0f24cc1bdb47cd63bb2b1d9deac82afc7532ed4da9f28e9560e42fdf6d8c80d81d7cf46756ff4edb5
-
SSDEEP
3072:i1eW+GNgK2IZAkPXTZIaufxLQEILvc851I3EvPLiMlBbA2tCVQ:i11N32SXix0E2U7KDy2tCVQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5adccb5ce7c85faf4c70994d40963796e3e8415820e3638cd0422f53e1363d52N
Files
-
5adccb5ce7c85faf4c70994d40963796e3e8415820e3638cd0422f53e1363d52N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE