Behavioral task
behavioral1
Sample
c4afcdb7d5bf3134df024c688928e9dd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4afcdb7d5bf3134df024c688928e9dd.exe
Resource
win10v2004-20240226-en
General
-
Target
c4afcdb7d5bf3134df024c688928e9dd
-
Size
5.1MB
-
MD5
c4afcdb7d5bf3134df024c688928e9dd
-
SHA1
32f490aa2af23592d32b8531df32b07579829ba9
-
SHA256
ad6a4f88308c6b998435234e6bce1d120519af66e88959aa1b73593376da01ff
-
SHA512
391345187b9587a6e74f0673ec98d98bf83aa2eec258dbc843de5861d0b3a3c6dcedfa7cd1b55b4e773754617c9f6e3dabbf2c8829706af547d93ee8a7a772f1
-
SSDEEP
49152:xahadOKxO87uoQ4w1x2jOC5x2nviLWPZ+RbyiSNay3ibo9SBzidPJZ/H1IM68u9R:Ca4UZQ4k6w13Yo9Qr+03
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4afcdb7d5bf3134df024c688928e9dd
Files
-
c4afcdb7d5bf3134df024c688928e9dd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE