Behavioral task
behavioral1
Sample
c3139fda8e27f8da77cf8d0458fba0a8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c3139fda8e27f8da77cf8d0458fba0a8.exe
Resource
win10v2004-20240226-en
General
-
Target
c3139fda8e27f8da77cf8d0458fba0a8
-
Size
2.6MB
-
MD5
c3139fda8e27f8da77cf8d0458fba0a8
-
SHA1
bfa8629d5f7a714d43b992be5c1534edf8ee9303
-
SHA256
b023a0da354899cf2b9fdfebf58a0cd6d0127b2d96f92a6092d329c3673bfd98
-
SHA512
7f564d4e77dc7d6b70bbc6cb3c306b2147fadd072e4e114a8185d70355d63e9c2aedac032a65176602870c07ad2e5c3a254c11cef0cd46226c06bca0bcb7e8bf
-
SSDEEP
49152:X6Zkpr8dtUhmRcu3mIfzPydQYZ/WTvoCIEwS46j1ZrFuay3:qArupPfTrYxIwSdj3E3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3139fda8e27f8da77cf8d0458fba0a8
Files
-
c3139fda8e27f8da77cf8d0458fba0a8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE