Behavioral task
behavioral1
Sample
c2a874229fb6892cc467b48b162aa409.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c2a874229fb6892cc467b48b162aa409.exe
Resource
win10v2004-20231215-en
General
-
Target
c2a874229fb6892cc467b48b162aa409
-
Size
302KB
-
MD5
c2a874229fb6892cc467b48b162aa409
-
SHA1
7fd801400c7d1274c6731682f9c169cf7b39e040
-
SHA256
be37162796a44f1c849c583a1538b5661d0d2575f6fecd07930f74484ec8b537
-
SHA512
e5c05545136ad047631900bad4131d2c35e1bc45b53f33d83963724e9d230792b6ca1a3b9c34013c6e73a2c5915715eb2097bcf115ebffee4dad9266e9b6c557
-
SSDEEP
6144:PuRKYh+5lYw5j4tFRxuV8D+9xuBPut0MG3mQ:PuYc+5lVjwy92Mw3m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2a874229fb6892cc467b48b162aa409
Files
-
c2a874229fb6892cc467b48b162aa409.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE