Behavioral task
behavioral1
Sample
c067d56526ca4e5ef50ecb77ad215aba.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c067d56526ca4e5ef50ecb77ad215aba.exe
Resource
win10v2004-20231215-en
General
-
Target
c067d56526ca4e5ef50ecb77ad215aba
-
Size
2.9MB
-
MD5
c067d56526ca4e5ef50ecb77ad215aba
-
SHA1
a60cebaf475e65f0238c8ba377323d8c9b2850df
-
SHA256
e1185aa86cb1168582bcb8f4fe01238a0c8ab144be60f540d616f5ecc2ffb8d6
-
SHA512
dc65d61d1f6d309453a741de63dee4ed9b1747ee8f2d65a7ce665313c89062dfec5b249e9aa830bc00f1ccda46e1138b345af0f158a78150344c3a81a96fd91b
-
SSDEEP
49152:EfDXPjr5nnUXWocZk9dHTBB4mP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:GVnyWDZulemgg3gnl/IVUs1jePs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c067d56526ca4e5ef50ecb77ad215aba
Files
-
c067d56526ca4e5ef50ecb77ad215aba.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE