Behavioral task
behavioral1
Sample
c273c54da0593082600289ff1927a520.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c273c54da0593082600289ff1927a520.exe
Resource
win10v2004-20240226-en
General
-
Target
c273c54da0593082600289ff1927a520
-
Size
2.7MB
-
MD5
c273c54da0593082600289ff1927a520
-
SHA1
730590b687664d4ff33c8a259e9df1fbcc2a00eb
-
SHA256
152939800fa53b4bf2563034787b0924713a74330995950f8c9f1393e3dec89e
-
SHA512
a77fb3519e09d7412986cafa36513bb5778e57f9c3244d6ab29898cff774e9714447fc17549d03623f5d42271ffd0d1932b4578f3e746576f2e8ca906c57b621
-
SSDEEP
49152:mLmIZraXcTzITWI8vKpd1l/OOtxNQsKL6nyCq5dxFQK1BVZe799Dy61Pxp:mKFXcoq5sTl/jKFOyfDjQK15G97Pxp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c273c54da0593082600289ff1927a520
Files
-
c273c54da0593082600289ff1927a520.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE