Behavioral task
behavioral1
Sample
c37924b92ba4e7c250d5589ca7c614c7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c37924b92ba4e7c250d5589ca7c614c7.exe
Resource
win10v2004-20240226-en
General
-
Target
c37924b92ba4e7c250d5589ca7c614c7
-
Size
279KB
-
MD5
c37924b92ba4e7c250d5589ca7c614c7
-
SHA1
a49f7e8d93f3175abcb157059fe0cc4cd47e8896
-
SHA256
067cefb91c0508997f5d16ccbe6b5f98b8f6a8dd6434ba840c58ecfc3fdfe82c
-
SHA512
adca01f303bfbab1eec3efddef23234cc2b8223652be1a6ed4d70f3de4c585760704137b1cc9943ca083beb1143c2294cebbb413468bf61f17277a6251bc503f
-
SSDEEP
6144:PKxSE+I6xxEF/xzaAFoUYUyG/wrV4SZiczckBTxVd4VXOk7x:PKUnjs/xzMUYUDcq4tckBTxn4xx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c37924b92ba4e7c250d5589ca7c614c7
Files
-
c37924b92ba4e7c250d5589ca7c614c7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 696KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 200KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE