Behavioral task
behavioral1
Sample
c65293b9df5f00d39b5220157bcf416b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c65293b9df5f00d39b5220157bcf416b.exe
Resource
win10v2004-20240226-en
General
-
Target
c65293b9df5f00d39b5220157bcf416b
-
Size
32KB
-
MD5
c65293b9df5f00d39b5220157bcf416b
-
SHA1
8cb97a739d4b8d5d929990b24c86c1071b608778
-
SHA256
54666e50470d3534b4aa9ed84ba713ef94e34e53b9b4f3284a360555b9885c37
-
SHA512
1267ac2bc2f5f3bd5ca3611f1f077df3e6f1bfd179ab18bfeb874e37a1ec5667d92219d250b06374fa10ef574de1b0c3a5811a2fc9cb5845ceaa0356a8552b4c
-
SSDEEP
768:/i+Z/x4mi2meAKK9Ya3lwo5gKqU9ME/k1dyy7owe5qUbFnbcuyD7U:/F/x4mkKKpVwNr1cyMw0PFnouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c65293b9df5f00d39b5220157bcf416b
Files
-
c65293b9df5f00d39b5220157bcf416b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE