Behavioral task
behavioral1
Sample
c103acfb679a8b0f275a1b19c6ee9dd5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c103acfb679a8b0f275a1b19c6ee9dd5.exe
Resource
win10v2004-20240226-en
General
-
Target
c103acfb679a8b0f275a1b19c6ee9dd5
-
Size
99KB
-
MD5
c103acfb679a8b0f275a1b19c6ee9dd5
-
SHA1
d65027f885e6a019274a516b322e1a6f0de13f3d
-
SHA256
e3429e92dfd8a6cb051ef66e17aca852b763810822c0737fdb6e625e2757436c
-
SHA512
877a82531b37e3239b3cfe5087bcbfcda7bf16cd08fd0ec25a01ac5a3c9f996d82e590efaa39f59c0207f51bd3977695bba24621272c735f0c2a821ef3fb8bab
-
SSDEEP
1536:9Je+PFCMOtQi7OfXvi9zkNDjtwjMMFwuQloOyB5gSlT7elkpMd/4EdHrbu/:XhPkOfYzk5jyjaWOywif9MR4EdLbe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c103acfb679a8b0f275a1b19c6ee9dd5
Files
-
c103acfb679a8b0f275a1b19c6ee9dd5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 616KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE