Behavioral task
behavioral1
Sample
c60dd384a257874a6e93fe3f9599c563.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c60dd384a257874a6e93fe3f9599c563.exe
Resource
win10v2004-20240226-en
General
-
Target
c60dd384a257874a6e93fe3f9599c563
-
Size
469KB
-
MD5
c60dd384a257874a6e93fe3f9599c563
-
SHA1
7a30c9a9f5763ff72d4b2dfeb30b6801e650bb4d
-
SHA256
51d8fb55b77210f00486be3cc4f4f80b72a635819c204c276323e104765f8ee6
-
SHA512
5bf3d9c6837f55d2dff21e958fd75b9320a6866e2a5370dd3edcd5aeac133baf0caaa4ed83ceadea665ec056749c29ff44ae021f71546a2acdf2d075f08f7516
-
SSDEEP
12288:fqIiWq4j4rm7IZsuVAMV932PnmXZ954WE1p:fviWq4jUm7CsuV8Pnm9E
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c60dd384a257874a6e93fe3f9599c563
Files
-
c60dd384a257874a6e93fe3f9599c563.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE