Behavioral task
behavioral1
Sample
c193e61ff9ca3801eec6f53d904ea091.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c193e61ff9ca3801eec6f53d904ea091.exe
Resource
win10v2004-20240226-en
General
-
Target
c193e61ff9ca3801eec6f53d904ea091
-
Size
10.2MB
-
MD5
c193e61ff9ca3801eec6f53d904ea091
-
SHA1
c2a2a0cf59873ec99900a3e6953c88496b9f6929
-
SHA256
802a1023eef4418cd1ea9b997bcced2b7e6ff7bfb4fd1660e2ac8d6244240826
-
SHA512
0d0b8677524057c3856fab7a1a7757938d1197f19eb43aac3fad0b97a5bfa30523be0656b624eb97f99e9f62f8c2aabf6588dbc3c7b5c5a5fc96cd80b239985a
-
SSDEEP
98304:fSZthDQGlvRA3VoxBUa/xegL2m3BjOYhDt1KMYnXNTRCfG3VoxBUa/xegL2m3:aZTDQw6zaJdL2LOt1KMImmzaJdL2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c193e61ff9ca3801eec6f53d904ea091
Files
-
c193e61ff9ca3801eec6f53d904ea091.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE