Behavioral task
behavioral1
Sample
045c1cb351d3e9eec500963a91bca372.exe
Resource
win7-20231215-en
General
-
Target
045c1cb351d3e9eec500963a91bca372
-
Size
2.7MB
-
MD5
045c1cb351d3e9eec500963a91bca372
-
SHA1
f1b574a1cd4d95f01ec1ba64d61836d08bdd9a64
-
SHA256
685f9d9f4984027d347370225497ed58f0ada07977a595f30dd908aa31960d7a
-
SHA512
1823d90e8ec45b5fb61bc2fa00b02ec18283defa309901dd85b753ba6fde7a1d3000b2d758113d1358c8a509aa67e4e20e8759e72475179652b1974a783185a1
-
SSDEEP
49152:dJu4doY9kboPq/ZSQ1jkBrRBr/SA7/o/Owlmvsu:rd8XZS6kDXi1Ws
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 045c1cb351d3e9eec500963a91bca372
Files
-
045c1cb351d3e9eec500963a91bca372.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE