Behavioral task
behavioral1
Sample
c04e915ef90f4ee2ebb2984e5253fd397394975664503dab615cd360ff4054b3.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
c04e915ef90f4ee2ebb2984e5253fd397394975664503dab615cd360ff4054b3.exe
Resource
win10v2004-20230703-en
General
-
Target
c04e915ef90f4ee2ebb2984e5253fd397394975664503dab615cd360ff4054b3
-
Size
832KB
-
MD5
ddae4b52d602615b1cf1e39640b5f6dd
-
SHA1
12991cdb489eb29ed85cc83cc3b5297b2efebbc2
-
SHA256
c04e915ef90f4ee2ebb2984e5253fd397394975664503dab615cd360ff4054b3
-
SHA512
5a404b5d69470e385ee2b50d2e7781abcfa8aff4159de544bc1a4562abb99bd3f82f98aecbfc62484c082dc510aa7dc4008848bed18387322c101ee451361c1c
-
SSDEEP
12288:9hkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcjLIY+:LRmJkcoQricOIQxiZY1ALIY+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c04e915ef90f4ee2ebb2984e5253fd397394975664503dab615cd360ff4054b3
Files
-
c04e915ef90f4ee2ebb2984e5253fd397394975664503dab615cd360ff4054b3.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 496KB - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE