Behavioral task
behavioral1
Sample
c13db1385adc69ee0fc7a22ddf457052.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c13db1385adc69ee0fc7a22ddf457052.exe
Resource
win10v2004-20240226-en
General
-
Target
c13db1385adc69ee0fc7a22ddf457052
-
Size
472KB
-
MD5
c13db1385adc69ee0fc7a22ddf457052
-
SHA1
63776147e2cf0d8e0bb0956b03c42a493340bafe
-
SHA256
16b1e057956eb8c667b44e1926e1ca4620b88e4a0914a7f8048ae5d9ba748fda
-
SHA512
550ad42207b5da958f6cd4639d829ea9b65b367a163bd3ef156125fddb35b58a382569cc3a1bc2805e224f18e71e9767f4da90291dc8091378dffcd60cd3816d
-
SSDEEP
12288:Mg+7E9yeQN88v5y0w9CnI83d8rbRtQVwAMwNaiGzEFfoUN:MgAEseQ2G5y0OfwdMwaiTFgUN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c13db1385adc69ee0fc7a22ddf457052
Files
-
c13db1385adc69ee0fc7a22ddf457052.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 472KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE