Behavioral task
behavioral1
Sample
c1a879ffc265e87b1b9e81d26c8f59de.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1a879ffc265e87b1b9e81d26c8f59de.exe
Resource
win10v2004-20240226-en
General
-
Target
c1a879ffc265e87b1b9e81d26c8f59de.bin
-
Size
498KB
-
MD5
c1a879ffc265e87b1b9e81d26c8f59de
-
SHA1
13eb24e81040b10c1c972c1de60092c3b54384cb
-
SHA256
b682b8d96a53973096eb1f33242ec9aadd5d49c9f201fa5fc1bacc9c8103a8fa
-
SHA512
1abca9d0a4339bd4032fdc1914a97cb690f984d0abcee1acadfe9b937d27bb5dfa0faa18cc591d399f524208483ae6186034c8999702da03e972d200b54fdd7b
-
SSDEEP
12288:yQsGaO3M46pWntOm3bvMd3tj1a/xrHoS:yQsGp3MA3bYS1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1a879ffc265e87b1b9e81d26c8f59de.bin
Files
-
c1a879ffc265e87b1b9e81d26c8f59de.bin.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 491KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE