Behavioral task
behavioral1
Sample
c11f16c96fadc4d724a2c9b831123d46.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c11f16c96fadc4d724a2c9b831123d46.exe
Resource
win10v2004-20240226-en
General
-
Target
c11f16c96fadc4d724a2c9b831123d46
-
Size
3.9MB
-
MD5
c11f16c96fadc4d724a2c9b831123d46
-
SHA1
5d941f02261489dbee169eeeb24f1379fe55d13c
-
SHA256
a392b4c3fbc9481ba4bd98f227e7bcf5f22241d9f1d2442bfdb57f7c0be9ecb3
-
SHA512
8320bd64d143aceb2e50ebd85af29bda4bee7804e7b24261c04295cfe768112066fd2932854e0d1bb72f920b80743c499861039daa1972e74681382b06c31d90
-
SSDEEP
98304:eppx4u8R5tUtn1cakcibiqhAgMloPwtcakcibiqh6Lt0TRz4rdNAcakcibiqhAgd:epvk501dlir0ptdlirELCTRz4p6dlirJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c11f16c96fadc4d724a2c9b831123d46
Files
-
c11f16c96fadc4d724a2c9b831123d46.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE