Behavioral task
behavioral1
Sample
c2a3f048318a6abcb3cb350c18e32997.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c2a3f048318a6abcb3cb350c18e32997.exe
Resource
win10v2004-20231215-en
General
-
Target
c2a3f048318a6abcb3cb350c18e32997
-
Size
5.5MB
-
MD5
c2a3f048318a6abcb3cb350c18e32997
-
SHA1
748e492620daa13daeb9deef672f04cf9467ef49
-
SHA256
1b02c03d14e48560ea3b7c6a8924b1a25c0a6606822df2fadb1e3d7ab34bb72f
-
SHA512
2c4e4de67cead202e1db767df696df4125b2eb8a55fe563572d2fddeef081427f9eef5ecb81cd2a8b5a617b902aecc22fef55354f485f83cc2bae8994b67c385
-
SSDEEP
49152:6HfbsTswqpgHShEftfPhzmazvguOay3vRmCFOGNj8mW4JH53R+wVG+l0yd/e9UJ8:6/IJp8aMuG35mCckFR+vicS43
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2a3f048318a6abcb3cb350c18e32997
Files
-
c2a3f048318a6abcb3cb350c18e32997.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE