Behavioral task
behavioral1
Sample
c1c5ca944afecc9cda2e5ec62fa7016b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1c5ca944afecc9cda2e5ec62fa7016b.exe
Resource
win10v2004-20240226-en
General
-
Target
c1c5ca944afecc9cda2e5ec62fa7016b
-
Size
22KB
-
MD5
c1c5ca944afecc9cda2e5ec62fa7016b
-
SHA1
62095d8cf729e0e3d7efe8e6226d0f84487510f0
-
SHA256
3c9b5b94527aae01c04c41f5712a141d064de812c86b379cdf83e287358589e0
-
SHA512
a06e4e9abd58a82db664f7a61dbb8202614a252c25d98725f7c7f3a775884df9111605dda2af01de5e4675b8ee2e7e842bb0c68f2965b62f97a8ca1037d4d39d
-
SSDEEP
384:+vLIInpHoOmP3gfu7tGI0OO8rYxCf9IdaiCtfuumzjtVObH8CIplU0ab:OnpHEPwfRORrSH0fupzjtEzcTIb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1c5ca944afecc9cda2e5ec62fa7016b
Files
-
c1c5ca944afecc9cda2e5ec62fa7016b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 900KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 509KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE