Behavioral task
behavioral1
Sample
c5babfd096f4ee8e3b5c0b176814ff1c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c5babfd096f4ee8e3b5c0b176814ff1c.exe
Resource
win10v2004-20240226-en
General
-
Target
c5babfd096f4ee8e3b5c0b176814ff1c
-
Size
1.8MB
-
MD5
c5babfd096f4ee8e3b5c0b176814ff1c
-
SHA1
99e683c8897026814b1766fe8271fb64645dfeee
-
SHA256
97c40ba5038a3a7d3f6d9705e132fbd2dd1610f96ae2e6d7579a1b6b2204f8a1
-
SHA512
721cf9768ce42ae6f50321581af473724aaf9b1e6acb59a0acd45be67e31ec5b95e5924545ab2a24af70bb5eb856bfa8eb0fcea73a36a9b09c85b8d88ac53b7e
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHJ:SCqm2Jpr0nNM7Dus7Nx2p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5babfd096f4ee8e3b5c0b176814ff1c
Files
-
c5babfd096f4ee8e3b5c0b176814ff1c.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE