Behavioral task
behavioral1
Sample
c19aea63dc190143b8d64cef45b1d10c.exe
Resource
win7-20240221-en
General
-
Target
c19aea63dc190143b8d64cef45b1d10c
-
Size
2.3MB
-
MD5
c19aea63dc190143b8d64cef45b1d10c
-
SHA1
f94f10c0b5f57ac48dc6d759e3198a6e0df5a5d9
-
SHA256
31fd683b21158fd7027849893669685f050e1b6c26f15fc18a4a260351ebe01d
-
SHA512
cccf528d599d43b3c0f359dbee3321ca415b753251084e60833295e61e9f83779928528b6e6fc7801d4ff7485a6a3bfe9f518bbf4126a9ed376951bb4c5fad3f
-
SSDEEP
49152:6HO6Kohi+/xJJqKxhTQaqo62vaA8GN/S8ogtZ5Kis8z67R+lI1gyoAQY:69hxxJhQvtmNa83r5K78/IOyo9Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c19aea63dc190143b8d64cef45b1d10c
Files
-
c19aea63dc190143b8d64cef45b1d10c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE