Behavioral task
behavioral1
Sample
c304b5e5c65bd43febbb2ef2e66b0564.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c304b5e5c65bd43febbb2ef2e66b0564.exe
Resource
win10v2004-20240226-en
General
-
Target
c304b5e5c65bd43febbb2ef2e66b0564
-
Size
302KB
-
MD5
c304b5e5c65bd43febbb2ef2e66b0564
-
SHA1
95d772dedf4bf20bc6d3b9a04efb099d59037e97
-
SHA256
890fe2da687983d4170474a7f7658d728f8ee1c2d9f2c41e72ff4e5c4ca0a5e5
-
SHA512
fc4ce02a89692639d658989956b7c10b6837a5b74703c13535776f1ff4ef412920c70b7b9b87d958a88b49ad9ae874ad82731c2b43122ebd4f06c8d668a7bc9f
-
SSDEEP
3072:YBTevIZ/VZvqjmVrh0v5ifkwsDIBNTwBUHdXdEmtPJeN99PXFLx+FkwP05GFN+r5:S9XuOh0vIfkRDQGgtEqeN3vYBFmQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c304b5e5c65bd43febbb2ef2e66b0564
Files
-
c304b5e5c65bd43febbb2ef2e66b0564.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE