Behavioral task
behavioral1
Sample
c9e66eea80049e38fb682608874ea328.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c9e66eea80049e38fb682608874ea328.exe
Resource
win10v2004-20240226-en
General
-
Target
c9e66eea80049e38fb682608874ea328
-
Size
6.0MB
-
MD5
c9e66eea80049e38fb682608874ea328
-
SHA1
a8a5d02dad519cd2a209746f1f11d65c28e3b13c
-
SHA256
7fcd4d3597289ecaa688cc7c717f1ce5e1110f63a38e55acb6de858580b73ab8
-
SHA512
6111edaa7674a79acd26882331b83f8d58c3eb33d2e703f75fe35c7bf1ac7885a6e0915ca7f144dbecf841ab0639c6ca01cb53cd48daea6a5474039937386e61
-
SSDEEP
98304:IDycYHLn214cakhy595sgp9cak6fE8TPIcakhy595sgp9cakNktN4zWa37cakhyp:ID7QjZdBXTdm8TPIdBXTd+Wa37dBXTdZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9e66eea80049e38fb682608874ea328
Files
-
c9e66eea80049e38fb682608874ea328.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE