Behavioral task
behavioral1
Sample
c249849b0908460f51ad497a96ff2a0c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c249849b0908460f51ad497a96ff2a0c.exe
Resource
win10v2004-20240226-en
General
-
Target
c249849b0908460f51ad497a96ff2a0c
-
Size
36KB
-
MD5
c249849b0908460f51ad497a96ff2a0c
-
SHA1
3120dda0f8afd384e226c7dc5b3cefbe353f5294
-
SHA256
3dfe916aa3d1048023cbbf8cea79cd6b39ec38210860d6823db4a3a1a0cc28b6
-
SHA512
c91e69188e569a34fe1a5a3bb192296e335a6bd46b9bdc45804d363bfc3e87438d5149d6dc20a8d8a6834b7afd7cb95515ff24ecefa2c6a5ba7822f555e9a051
-
SSDEEP
768:PQweCewMPNX5s3SjNLLX7xxfFUYCBW6sPhNogtHT:cCncNps3Sxn/CYCBW66FHT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c249849b0908460f51ad497a96ff2a0c
Files
-
c249849b0908460f51ad497a96ff2a0c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE