Behavioral task
behavioral1
Sample
c85dff9876de50a3f2f370894674225e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c85dff9876de50a3f2f370894674225e.exe
Resource
win10v2004-20231215-en
General
-
Target
c85dff9876de50a3f2f370894674225e
-
Size
99KB
-
MD5
c85dff9876de50a3f2f370894674225e
-
SHA1
fdcf515133086c021c6c6b352a59726796cc0da4
-
SHA256
59cf2b4d0c802188bb86b63ee8bf6032575e0a61a1e4ac93e39f377f073123f4
-
SHA512
b54413b69b84a5cd81a515723ec4decbe6eaea444ed11225dc02ac33f3dfc441f2ef73fcb57da783ca149eec70fdc95868b4e9b57cfcf8a50be5efae1d50a1dd
-
SSDEEP
1536:eB88XdvpLwCyl5UQ8ZwkeYmYTRZfA5kw/3UBbtoERrKKlr5:BOXwIvwkVRT45kw/3yO0rpll
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c85dff9876de50a3f2f370894674225e
Files
-
c85dff9876de50a3f2f370894674225e.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE