Behavioral task
behavioral1
Sample
c88bded785378c24fd2e5a6e15c7394a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c88bded785378c24fd2e5a6e15c7394a.exe
Resource
win10v2004-20231222-en
General
-
Target
c88bded785378c24fd2e5a6e15c7394a
-
Size
11.0MB
-
MD5
c88bded785378c24fd2e5a6e15c7394a
-
SHA1
119eb4e66d989fd6d1f1c1f1a42c0e9e9c15783f
-
SHA256
f358dff5fbb98030d7118f77132c5c01094040bc7772cd6b73a71924bc40516c
-
SHA512
2e755bcfc483d8b0470e4392e910e93a15242a100fccc150ca3497501d8a531bfb254bbd60bb277801627f11fe47383fb077b73dea1b94a7c6638a898100f5a0
-
SSDEEP
98304:SXRBgIj9c5hM835mCckFR+vicS43bPeLoqbE1KcYE1UP35mCckFR+vicS43:SXRBb9c5V33FR+6cT9qfcY5R33FR+6c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c88bded785378c24fd2e5a6e15c7394a
Files
-
c88bded785378c24fd2e5a6e15c7394a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE