Behavioral task
behavioral1
Sample
c7ceba999ae1987059509ac4eaec21b32800e501005fffeead566bf2f9d5c29c.exe
Resource
win7-20230220-en
General
-
Target
c7ceba999ae1987059509ac4eaec21b32800e501005fffeead566bf2f9d5c29c
-
Size
2.2MB
-
MD5
f772f257f10db544eae72c462f21878c
-
SHA1
0104c7d4942a552504f7e287b06b8dbb43d2874b
-
SHA256
c7ceba999ae1987059509ac4eaec21b32800e501005fffeead566bf2f9d5c29c
-
SHA512
fe9bf66e6ab072c4c79e82a3bd5d33f0478d93d8bfcb52ce2c3b1a2f49e346591c8adf4a00ebd143584b703ee2ef97d5014101b56d3104e90a560382e09483a5
-
SSDEEP
49152:brZlHdYb+Z434XQsJ7WOwzcLtC6L1Rm3tWXm+K+WqCsm:b9rS+nQALw8tVBR8tWXrVWBsm
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource c7ceba999ae1987059509ac4eaec21b32800e501005fffeead566bf2f9d5c29c
Files
-
c7ceba999ae1987059509ac4eaec21b32800e501005fffeead566bf2f9d5c29c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ