Behavioral task
behavioral1
Sample
c600b4be94abf1729323e4cf93a974ff.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c600b4be94abf1729323e4cf93a974ff.exe
Resource
win10v2004-20240226-en
General
-
Target
c600b4be94abf1729323e4cf93a974ff
-
Size
484KB
-
MD5
c600b4be94abf1729323e4cf93a974ff
-
SHA1
ef45b877d7351fac85a706a3c798874417305411
-
SHA256
5ade99e63d621becd2e2761060da3a0bb6bc7ae7765dd9c602f2cd768cdfab9a
-
SHA512
f07776892a664a64a9e22738e055679c3f754c7d284e871476200a9320c8d550d4a675a1c782c8d6d17786856eb45233514b660c6fa548ff11bdd40ddc3610c6
-
SSDEEP
12288:rnbFHTrQ0wiuQjIC5HXwW7OQWLB23Fss/WO0oSrREM/:DbFuQH5HxJIB23FssuOkEM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c600b4be94abf1729323e4cf93a974ff
Files
-
c600b4be94abf1729323e4cf93a974ff.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 384KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 404KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE