Behavioral task
behavioral1
Sample
c4131be13937f631d624b3458609b9d2.exe
Resource
win7-20240215-en
General
-
Target
c4131be13937f631d624b3458609b9d2
-
Size
2.7MB
-
MD5
c4131be13937f631d624b3458609b9d2
-
SHA1
74c13d7e162bde3e791fcf08e7f70268e97818fc
-
SHA256
f0add1bf4907a76440e2ce3ed8caa6e7fbbe291790d98436f825f078bceeb343
-
SHA512
122da9df69c73f93eac966c360c756da1ddf5f2971822faaceeb047fdff088041a5842bfab081b1fc270b3d1d13a9a3ac31d2efb6f2be505568d605512f369be
-
SSDEEP
49152:jsQN3rZvu0LHORwTIkVr/KndEX9FQoXNA/J3bMxV9si8x6Yaz/5Vqkif:7N3lv/SRwTIoWdCC+NOhysi8xa5Mkif
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4131be13937f631d624b3458609b9d2
Files
-
c4131be13937f631d624b3458609b9d2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE