Behavioral task
behavioral1
Sample
c151d21c8966c78dc9711f79f7dd51dd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c151d21c8966c78dc9711f79f7dd51dd.exe
Resource
win10v2004-20240226-en
General
-
Target
c151d21c8966c78dc9711f79f7dd51dd
-
Size
10.2MB
-
MD5
c151d21c8966c78dc9711f79f7dd51dd
-
SHA1
747fb219c46ebeb92eba19978176fae1ff818c60
-
SHA256
8792bb633885e0e9c5bc69ec1ea781e69e62a3da090954f008b36b0f609c2c79
-
SHA512
4ea64ba7274402ff34567849c835b8a975c507385648fb7d5d6c00d5d0ceeb247ff1a26d7c7c760bbdd72802a9ca6f40295333cbc33f574f01343fae45853124
-
SSDEEP
98304:N8ZD+vGY18MCb30g2yOEjjs9/g3rC0Pnn4VCB30g2yOEjjs9/g3:Kp+uaawZUju/b0Pn4VCqZUju/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c151d21c8966c78dc9711f79f7dd51dd
Files
-
c151d21c8966c78dc9711f79f7dd51dd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE