Behavioral task
behavioral1
Sample
c257546c52275c157eb09ff6bc9eb377.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c257546c52275c157eb09ff6bc9eb377.exe
Resource
win10v2004-20240226-en
General
-
Target
c257546c52275c157eb09ff6bc9eb377
-
Size
33KB
-
MD5
c257546c52275c157eb09ff6bc9eb377
-
SHA1
5edbacb633ab49f6f06f39cf5199f448d0b42267
-
SHA256
2c865714125469f44b733fe2d723b252a691e578e69ca7605d08f9fa92a0a306
-
SHA512
9a92973136da3922f3e394d351c5b5cf66588081526f09c6cf1f78bdb396a1e78d358f8b9aef8b2eb863f2115143033fd5fde3ff76bae6d6135460c259a8b11c
-
SSDEEP
768:ZXy73JrsNiHBZ7otb/2dvjvOS0RbFs9TymJcO/2zlX1bLIOZUPbJ:hUH/74DQL0Rb2uUcO/2zdZIOCjJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c257546c52275c157eb09ff6bc9eb377
Files
-
c257546c52275c157eb09ff6bc9eb377.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE