Behavioral task
behavioral1
Sample
c45e61df37a32866fbb7700b07661708.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c45e61df37a32866fbb7700b07661708.exe
Resource
win10v2004-20240226-en
General
-
Target
c45e61df37a32866fbb7700b07661708
-
Size
126KB
-
MD5
c45e61df37a32866fbb7700b07661708
-
SHA1
aa5039b11b919ed204bab1bb8bcab75602fc5632
-
SHA256
c73406daa9024dda41d1a41b3a8bae52c1e9223ca14a9e20790eb1e1c2f7dbbf
-
SHA512
76bcc70bcc1c8f75d20e812490a91e970beb22760eeb4df7e8a656c31c994d6cc6a15f2a57afc7dbf7b29a9a037db7f92ee87a8ff3dabcaa931e5dc726d2d485
-
SSDEEP
1536:3UUUUUUUUUUHdTD+vvvvvvvvvh+UUUUUUUC9mIkkkkkkTyhhhhhhhMa3KN2YufKB:blN9RkkkkkkTLJ0YufKe+AjwsXclw/I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c45e61df37a32866fbb7700b07661708
Files
-
c45e61df37a32866fbb7700b07661708.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE