Behavioral task
behavioral1
Sample
ce4c20e4d5d4ef5bdb31e244826b21980e911535f5f02b385862f80c4efa660f.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
ce4c20e4d5d4ef5bdb31e244826b21980e911535f5f02b385862f80c4efa660f.exe
Resource
win10v2004-20231023-en
General
-
Target
ce4c20e4d5d4ef5bdb31e244826b21980e911535f5f02b385862f80c4efa660f
-
Size
76.1MB
-
MD5
8a90172c960207376910b3845552d6ab
-
SHA1
04aae8959101ccae10178150ab5ba7926e4bea1a
-
SHA256
ce4c20e4d5d4ef5bdb31e244826b21980e911535f5f02b385862f80c4efa660f
-
SHA512
fa70666f45c9a04ef9d84d604009b477032d13371ee8785440c747841a079e2f92fd238d5bc790af8559e8121652ea7dc711d70d70188bb3ae58302d019ae3c4
-
SSDEEP
1572864:iBURyxVCh5J871slrmuZN/n64tz/O8zmRTvvPFVSV5lB+nkYHUsJYsN+MK2BWFqC:iBokChvKuZ9n08w3FVIz+nkY0sfNkqru
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce4c20e4d5d4ef5bdb31e244826b21980e911535f5f02b385862f80c4efa660f
Files
-
ce4c20e4d5d4ef5bdb31e244826b21980e911535f5f02b385862f80c4efa660f.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 51KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE