Behavioral task
behavioral1
Sample
c15a19579f9d83d94b9a7edb0679bae6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c15a19579f9d83d94b9a7edb0679bae6.exe
Resource
win10v2004-20240226-en
General
-
Target
c15a19579f9d83d94b9a7edb0679bae6
-
Size
101KB
-
MD5
c15a19579f9d83d94b9a7edb0679bae6
-
SHA1
21c630cca06be00bd12eef6776c95240e7b52418
-
SHA256
db6050b67d88dacd803450cb3cdc9f2bce540c22a31092f8b87ec7b4d4e56438
-
SHA512
e3a5e942af441425a21aac48058a04e8f897a8df94ad4ccef21c845d38287c8f3fb99a2b3743b179aff39de5f728adf430d1ad29c32ab5866f10d09e5f2dc445
-
SSDEEP
3072:pquDCCAzZsm7+2v5+lR58ZKD/iv3eHrtM+0outCB:pquDq6yr5+lRoKLiUB0oSS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c15a19579f9d83d94b9a7edb0679bae6
Files
-
c15a19579f9d83d94b9a7edb0679bae6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE