Behavioral task
behavioral1
Sample
c0a7f23b17da27a9318fff077769df32.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0a7f23b17da27a9318fff077769df32.exe
Resource
win10v2004-20240226-en
General
-
Target
c0a7f23b17da27a9318fff077769df32
-
Size
2.6MB
-
MD5
c0a7f23b17da27a9318fff077769df32
-
SHA1
9b6944a60c7d49f24590854dcf77a4f759903e1d
-
SHA256
3cb6eec1db505bdfadd2df8f2242959a654d2079b5e18999f6db19f2e1bf5f5e
-
SHA512
d74b7449ee42b557c7aadb7ea475f141ef0eb7218282d8e73d7f5f37544daafde12e729ce925bc9e57ed1c74d36c325b6fd6e5e8fb8cab862eab7a85d00b1483
-
SSDEEP
49152:A5H7XnEeFLFOPhdziKTP0XfXczcsl7Za2WwudXjrEuOp+6day3:hnzTW2WTX03
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0a7f23b17da27a9318fff077769df32
Files
-
c0a7f23b17da27a9318fff077769df32.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE