Behavioral task
behavioral1
Sample
c0060cafd7f9db928bb0e78ef2480cdf.exe
Resource
win7-20240221-en
General
-
Target
c0060cafd7f9db928bb0e78ef2480cdf
-
Size
1.4MB
-
MD5
c0060cafd7f9db928bb0e78ef2480cdf
-
SHA1
6082629f9f6b160ffc3504baa429ee3649bcc036
-
SHA256
166532feecaa14575279d728da2c9988049a8a7ea5d479e04c588a554a097809
-
SHA512
a17c63d63570228393e0d6960a91857f2acc5633f61ccb0c66a6ab0e5c00a0c30ea841fa906b8954c97504ab54a5f57e4986b312e972a84725a14620b853f869
-
SSDEEP
24576:y6yJMY9UFoRDhkeYM1jJR97zUbia9JVe0hs5WfBiERJchVML1bT6ES:1Y9UORVOM1jJHzaiape0hsABFRJch6L2
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource c0060cafd7f9db928bb0e78ef2480cdf
Files
-
c0060cafd7f9db928bb0e78ef2480cdf.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE