Behavioral task
behavioral1
Sample
c485517451de04f0c76a7da2ef089148.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c485517451de04f0c76a7da2ef089148.exe
Resource
win10v2004-20240226-en
General
-
Target
c485517451de04f0c76a7da2ef089148
-
Size
184KB
-
MD5
c485517451de04f0c76a7da2ef089148
-
SHA1
d987af09574f0da22617eebd83d2e1e84684bb5e
-
SHA256
6f12f672a64daa92ac9b47dd9f6896f513a4b6ab684db99186d6729897058b9c
-
SHA512
167d8276291dd40b6871510428873dc5f1c568e564e4874da22e3752ba78f0f307fe7b4602b200196866ed2cfd19f27be36a4c034b9acccb92653b91ed77f999
-
SSDEEP
3072:QPrYFMEfs8YgjBlSQJLSgoLIL1hUm3vbth8M3Nh2Uis+W0E86ZBb/:QREfRYSBlS8oLIZhDbrhHis70EX/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c485517451de04f0c76a7da2ef089148
Files
-
c485517451de04f0c76a7da2ef089148.exe windows:4 windows x86 arch:x86
de39dc68941cc6307e3b2590c857a907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
UPX0 Size: - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 88KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 68KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE