Behavioral task
behavioral1
Sample
c51532d836a65f69cd0c809afce93b7f.exe
Resource
win7-20240221-en
General
-
Target
c51532d836a65f69cd0c809afce93b7f
-
Size
216KB
-
MD5
c51532d836a65f69cd0c809afce93b7f
-
SHA1
b27a18a06f590cfa015fa2da4a3fb5d6191bfa38
-
SHA256
eafc54f8b28b54ec72d192f8374598a332f3cef8ddd5771571aba5d8b0ab45b1
-
SHA512
c799cbaf6514e08356b6c309b5d1a9b242e9f35b05ca959dbdcf28cf14597efd5f1333de828a3dce3b26d72cabc7a189132623c0330d8287ac77f2155080b08d
-
SSDEEP
6144:7NCzLYXnXmUhko3w4ge971kk3YEJ9aghoSReM:7NCzLctvw4geda87JYghoSReM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c51532d836a65f69cd0c809afce93b7f
Files
-
c51532d836a65f69cd0c809afce93b7f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE