Behavioral task
behavioral1
Sample
c667b4e1540cff373faa12244876da4b.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c667b4e1540cff373faa12244876da4b.exe
Resource
win10v2004-20240226-en
General
-
Target
c667b4e1540cff373faa12244876da4b
-
Size
3.9MB
-
MD5
c667b4e1540cff373faa12244876da4b
-
SHA1
1c082c4638c16faa1508a749bf54b7890f8cde55
-
SHA256
8c97eeb5cf9eef5b58ac2cf2e1228fefbc593cc447996a9b67b86ef01519a531
-
SHA512
d020396c06a2cba90d3d3baffd93aafe62c79726217f51f8d540d5ba835957eb91ec6726fe77dc1e0e2354f4924944a3e112470e8aa93f846ed318d37c8ccf3e
-
SSDEEP
98304:xcW1+w8EA9zyULG+gfA2t+HKwWB9uA9zyULG+Cq7IlXneA9zyULG+gfA2t+HKwW1:71DEzLqY8caB9fzLqbVlXvzLqY8caB9S
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c667b4e1540cff373faa12244876da4b
Files
-
c667b4e1540cff373faa12244876da4b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE