Behavioral task
behavioral1
Sample
c62d4e4b8dec5e8e61d8b1dce3513774.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c62d4e4b8dec5e8e61d8b1dce3513774.exe
Resource
win10v2004-20240226-en
General
-
Target
c62d4e4b8dec5e8e61d8b1dce3513774
-
Size
302KB
-
MD5
c62d4e4b8dec5e8e61d8b1dce3513774
-
SHA1
0da2c1bf609c884c2b55d5ef8c573a9b7e378ddd
-
SHA256
0c855e7f499de538fe3e7dc18044b9368259aff6c4aa7afd10bdb3b532db29d4
-
SHA512
41a8fd7428f447472db19273c2600e5466e75079a2667dc844a9d790eae9ccbe318bac5fdfeb6a39434c69e88f752a1ac3a4d22589495ec29ca4f813895411a3
-
SSDEEP
6144:aU8rmYF8ywAiO5rN7AiSJZSohWA/CBamQ:aFmNAiO5r5AiyZSoALBam
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c62d4e4b8dec5e8e61d8b1dce3513774
Files
-
c62d4e4b8dec5e8e61d8b1dce3513774.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE