Behavioral task
behavioral1
Sample
5feb9e47b7bd2800423acd6d46705d590d73bf5aa455511bb6eb6b8a8661731a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5feb9e47b7bd2800423acd6d46705d590d73bf5aa455511bb6eb6b8a8661731a.exe
Resource
win10v2004-20240802-en
General
-
Target
5feb9e47b7bd2800423acd6d46705d590d73bf5aa455511bb6eb6b8a8661731a
-
Size
655KB
-
MD5
8fd545659f5eedbaa0b651b447d1225e
-
SHA1
ec4fe8d946b03b6eb93e7e62b8ee4b01d719ccd2
-
SHA256
5feb9e47b7bd2800423acd6d46705d590d73bf5aa455511bb6eb6b8a8661731a
-
SHA512
a7f82b0b92a00b2cdc5ac9cfb88b7f6981d17ae271a745907cd4b0caa2f1bff0b52a46a4cb82448c3a48a6ac2894747cb9cb7a655b130434c0219cc08d74d978
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pF+:1HNJDMor12mquPZjq8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5feb9e47b7bd2800423acd6d46705d590d73bf5aa455511bb6eb6b8a8661731a
Files
-
5feb9e47b7bd2800423acd6d46705d590d73bf5aa455511bb6eb6b8a8661731a.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE