Behavioral task
behavioral1
Sample
c539064f7b6ccff7e464a58847110632.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c539064f7b6ccff7e464a58847110632.exe
Resource
win10v2004-20240226-en
General
-
Target
c539064f7b6ccff7e464a58847110632
-
Size
1.3MB
-
MD5
c539064f7b6ccff7e464a58847110632
-
SHA1
18aa1c3238392e525b74457295fef5bc86de1719
-
SHA256
6c5e36b570c303ba3be100fa72d570eb7a31791cc8f49bf50b43af122357271c
-
SHA512
520427027f14d84aba927cf7c453fe47ef9b74656dabfa42a7bebdd70f8f73bcc0665ed6544b61166aedd8bfc0fe3eddd2a6432334d5eed9e06b37765ae212f2
-
SSDEEP
24576:MAp058uv6zS2RTvH8jBwvGRJIopLI+xeI3ujL7AqIUbxoVCainEAanWc:MA+4zxv2OvGRJEieYu7v/nainz4p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c539064f7b6ccff7e464a58847110632
Files
-
c539064f7b6ccff7e464a58847110632.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE