Behavioral task
behavioral1
Sample
c205a3953129cabee0650d8204662296.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c205a3953129cabee0650d8204662296.exe
Resource
win10v2004-20240226-en
General
-
Target
c205a3953129cabee0650d8204662296
-
Size
130KB
-
MD5
c205a3953129cabee0650d8204662296
-
SHA1
d8daf8c7641cb68810ecb16b210820eae8ce2169
-
SHA256
c0d227378cd833defacdf8cbbbc9f2b80933d1cdd4a094f7fe2e34c281540bec
-
SHA512
abb49cf3033098277536c536afc1356ba91a6b588476a6286423850979bf2fa040384d92c79105898842b4e66fe57d1b25bedcd949a0bfff8a62a3b0e62e89c2
-
SSDEEP
3072:sr3KcWmjRrzSe1kMkHHe9SIidtsTbPkT0LllyghBAlg3XrHcVJnE:/u1cHHs5HkRghBumXuE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c205a3953129cabee0650d8204662296
Files
-
c205a3953129cabee0650d8204662296.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE