Behavioral task
behavioral1
Sample
c2f66c4f9d44298e0ee1360014f3a5a9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c2f66c4f9d44298e0ee1360014f3a5a9.exe
Resource
win10v2004-20240226-en
General
-
Target
c2f66c4f9d44298e0ee1360014f3a5a9
-
Size
1.3MB
-
MD5
c2f66c4f9d44298e0ee1360014f3a5a9
-
SHA1
c780868bd1293728ba920d3ce804a5d97f7bb82f
-
SHA256
34dbbdce334a8ead6a813f9fe26a66ceb535c1c02a8d1e99a3afd96875701d4a
-
SHA512
96b025fdcbca15f7ca02b7b67903a6a08a511fea7ae83a64d3b7e4caec3ee529f6bb75952a032b4b80c7091d30eb6eef1b6735ac8750c0d762f2c69bc06cb5d6
-
SSDEEP
24576:qIjOmJtHqOvMt5HDqZI/m+S1OMK2ZZV9hsvxsmDJrmRvG:h6p5H2ZP+SNthsvyqr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2f66c4f9d44298e0ee1360014f3a5a9
Files
-
c2f66c4f9d44298e0ee1360014f3a5a9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE