Behavioral task
behavioral1
Sample
c4f794dbe63a10ece0e53ff39da77f77.exe
Resource
win7-20240221-en
General
-
Target
c4f794dbe63a10ece0e53ff39da77f77
-
Size
784KB
-
MD5
c4f794dbe63a10ece0e53ff39da77f77
-
SHA1
0423270afdba6986f6d82568f50a167c712c67cf
-
SHA256
067ec1ccfdc69debdf12ad47d4775519c7e817ba7e9a535b3fe2a7d2fb1793eb
-
SHA512
7c2eaa434248c5ef3af027a68b2ae6335d758331734d0b9baf3fd7f71b020f05897f80aba4ac2ffb838b29eb4c0015fdf4c112fe7a6abb81403887d0aa9147db
-
SSDEEP
24576:ipzW3vuZ4lTr9bkHGyK4nsBIAx2I1TAG1dW:yk26lXZ4pnsF2IeQW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4f794dbe63a10ece0e53ff39da77f77
Files
-
c4f794dbe63a10ece0e53ff39da77f77.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE