Behavioral task
behavioral1
Sample
c69f22c8a78384d370df54e22417a0cf.exe
Resource
win7-20240220-en
General
-
Target
c69f22c8a78384d370df54e22417a0cf
-
Size
402KB
-
MD5
c69f22c8a78384d370df54e22417a0cf
-
SHA1
a02ad82479fcf264bfc0b9f0af3d23ff3ee3cf71
-
SHA256
dcca2bc3daf94e234cd8a7a905a17685fd6bfe1dfa507c2376b5cec4e825f6fe
-
SHA512
302e6e488157d5209d5eb7d88890ed24249395229c0fd90537603bc7e602afd31d4954ca8a5a3b0b634f56b7a46a323c4dd1f8799eafe012a2b14af891cdeb7c
-
SSDEEP
6144:NmaKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgN:6SmLAuEY71fviagATFmebVQDcYcp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c69f22c8a78384d370df54e22417a0cf
Files
-
c69f22c8a78384d370df54e22417a0cf.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE