Behavioral task
behavioral1
Sample
c0fe4ddbf3a1cab7e68f77cf8cda34d559c13e4cca7717ae4925708dff69d01c.exe
Resource
win7-20230712-en
General
-
Target
c0fe4ddbf3a1cab7e68f77cf8cda34d559c13e4cca7717ae4925708dff69d01c
-
Size
11.6MB
-
MD5
c79c71bd88c4eda62393bfe1e5b32919
-
SHA1
fee8f2ba06024d3d15fd1e0860cc6199a29f1dc2
-
SHA256
c0fe4ddbf3a1cab7e68f77cf8cda34d559c13e4cca7717ae4925708dff69d01c
-
SHA512
d0c32de4f01ab8de010282b19d5c0ba35954528dbd4de3779e8ba09dc214197725aa2fe344cd5d17ab8f8069421d12b705c842a11f2e375657387dc35287ab2e
-
SSDEEP
196608:BnTh4skZ357ixgBto5hK9jhJXYY1NeAbc1hyuNYlFSPvvhOvAdWD5ZkE4FYS:BqZ357ixgBtCYjHDeyuYAg5ZkE4FYS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0fe4ddbf3a1cab7e68f77cf8cda34d559c13e4cca7717ae4925708dff69d01c
Files
-
c0fe4ddbf3a1cab7e68f77cf8cda34d559c13e4cca7717ae4925708dff69d01c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 580KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE