Behavioral task
behavioral1
Sample
c684a6fe789981b098f8822ce30dc4bd2d96bd19bed9120046207007350549e0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c684a6fe789981b098f8822ce30dc4bd2d96bd19bed9120046207007350549e0.exe
Resource
win10v2004-20230831-en
General
-
Target
c684a6fe789981b098f8822ce30dc4bd2d96bd19bed9120046207007350549e0
-
Size
1.5MB
-
MD5
a3466eb9cf59c42eba24a4be52bad440
-
SHA1
7c55250f67b8fd71adc6c777c3bbe5730147e3ed
-
SHA256
c684a6fe789981b098f8822ce30dc4bd2d96bd19bed9120046207007350549e0
-
SHA512
adc68ecdf3b2d83c354e2dcf1faf87f2e23594be4c5ae912881a47e09c49140c06d17581c9e06d682a13a13d65b963442a965e88b3ef6005c8e29409bf4b5edb
-
SSDEEP
12288:20e5CGavkgGCc6yrRPpOSqGlsbbbIolRIBAU/xLYaYcMG3GumoSnizR:9Gavkg3NyNIbbbIoIBAUZLY9G3CizR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c684a6fe789981b098f8822ce30dc4bd2d96bd19bed9120046207007350549e0
Files
-
c684a6fe789981b098f8822ce30dc4bd2d96bd19bed9120046207007350549e0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE