Behavioral task
behavioral1
Sample
c052192da0f60717843fc8ba7ec4715c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c052192da0f60717843fc8ba7ec4715c.exe
Resource
win10v2004-20231215-en
General
-
Target
c052192da0f60717843fc8ba7ec4715c
-
Size
137KB
-
MD5
c052192da0f60717843fc8ba7ec4715c
-
SHA1
3aad01595c7c55bf0b7e01ef4bbcb1b8cfb19fd1
-
SHA256
e12cf9054f6b02a34a7a1efafa79d58f0bc51dedb6893cb4f96c5b70f478e7eb
-
SHA512
7c04f68d725e71f0020718fcd95c18b6ab0e9c50435dce0b400c7725d5bce94b17c6a4ce7dfc67df2a82b2e73823e72254598238bb3b05a0b1e0546018f711ff
-
SSDEEP
1536:u/nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HklJNprKR9lpJtHL53W:Ye8jMCjM/keGyMYaKW6WXrORRJtrlq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c052192da0f60717843fc8ba7ec4715c
Files
-
c052192da0f60717843fc8ba7ec4715c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE