Behavioral task
behavioral1
Sample
c4570d7d3ad3e755fa65413436d43954.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4570d7d3ad3e755fa65413436d43954.exe
Resource
win10v2004-20240226-en
General
-
Target
c4570d7d3ad3e755fa65413436d43954
-
Size
133KB
-
MD5
c4570d7d3ad3e755fa65413436d43954
-
SHA1
7ef11c07d2866a47e9b93d8dcef6d04f5401b850
-
SHA256
60e9d25f2c89726fc805f37e1ffa57f53dfd3ad603c836e2509e124159df80bb
-
SHA512
f251554cdd8e39799f0423fbbf4ebd23c13c82101227638a03f3c7729a02dc2e7819f85c30f147df56b00dd4414263ecfcdc151d6efb517f36b1ad21fdf53872
-
SSDEEP
3072:wm/DV3WCgG3kYhJxV1Cs7ZpqpuvfmBo1aAQMa6q6Ut3aoAUFwQ:wmB3WfG3Z1J1gc3mGI09JoT6Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4570d7d3ad3e755fa65413436d43954
Files
-
c4570d7d3ad3e755fa65413436d43954.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE