Behavioral task
behavioral1
Sample
c57ef860d954472d42f096bcd79133e1.exe
Resource
win7-20240220-en
General
-
Target
c57ef860d954472d42f096bcd79133e1
-
Size
784KB
-
MD5
c57ef860d954472d42f096bcd79133e1
-
SHA1
ecb7843c198102fda1407c1bf38c3231b8bd7dbb
-
SHA256
d785b1b4ccf01a11019a3b8cae0fb733d28819dc44014d8301a80a4d7cd733aa
-
SHA512
619eb0214e981556a2990356e1a1657968ca4e2d61ac0fcc64e0314684a5a182851153ae2d96e7926246d1be8a6f6f63a7e84b4c20b732d91fd6b8787cf3c5f4
-
SSDEEP
24576:1fWdhwFzsLsx8slHDj6XEA8iGLs1t6LlN5aziBak:hWXwFYqBljjkEAF1t6Lljazi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c57ef860d954472d42f096bcd79133e1
Files
-
c57ef860d954472d42f096bcd79133e1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE