Behavioral task
behavioral1
Sample
c30e0fd9d35aeed3ea2e1aa95af27066.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c30e0fd9d35aeed3ea2e1aa95af27066.exe
Resource
win10v2004-20240226-en
General
-
Target
c30e0fd9d35aeed3ea2e1aa95af27066
-
Size
2.8MB
-
MD5
c30e0fd9d35aeed3ea2e1aa95af27066
-
SHA1
27740efc8b0b40f81f0abf9bfc74cc0a556a0c2b
-
SHA256
754a90189597c56d8cb619dd8f0deb6885fd75e92696f09c5d59235b3372f6bd
-
SHA512
3df8c3368da1f166c6a74ece6c46c427e46bda29df2213d15bf99d6713c7e43b9e8baa948c408417242d2def5a6cb933f2b8888f7e93c45b256e9b7370cf1079
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHE6pQPxQ2JyP2r5mJV91M:SCqm2Jpr0nNM7Dus7Nx2kCqm2Jpr0n4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c30e0fd9d35aeed3ea2e1aa95af27066
Files
-
c30e0fd9d35aeed3ea2e1aa95af27066.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE