Behavioral task
behavioral1
Sample
c16af8f0be4ab82528c0098c2c00a7a2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c16af8f0be4ab82528c0098c2c00a7a2.exe
Resource
win10v2004-20231215-en
General
-
Target
c16af8f0be4ab82528c0098c2c00a7a2
-
Size
3.0MB
-
MD5
c16af8f0be4ab82528c0098c2c00a7a2
-
SHA1
acec9fda7494c0f66bbfd0460e9421680311643a
-
SHA256
04e7348d5f4ca17574a2e79a6beda40a443144622489bd3ffe4904df11d4061f
-
SHA512
0e500c83fb95dd5e8477848848409302e13b34dcc4bbcd61f3622d947831ae9e2a91a5cee2eda460a7503e89ba5ab322f6295700194aba149a2d5cf45a7ecf8a
-
SSDEEP
49152:GVOs7ps3mjIvjcakLWqhC2TH5t8NlqMcakLfUtDt/Z9zuHmcakLWqhC2TH5t8Nla:GVOsds3gmcakKaC2TZt8NlPcakjUtDJe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c16af8f0be4ab82528c0098c2c00a7a2
Files
-
c16af8f0be4ab82528c0098c2c00a7a2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE