Behavioral task
behavioral1
Sample
c75dce2d4c246a315a8fb5f345c41719.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c75dce2d4c246a315a8fb5f345c41719.exe
Resource
win10v2004-20240226-en
General
-
Target
c75dce2d4c246a315a8fb5f345c41719
-
Size
133KB
-
MD5
c75dce2d4c246a315a8fb5f345c41719
-
SHA1
a13dd1c8b7da0c8addf352d97499ad5b5f51bfa9
-
SHA256
1ffb30789748ed15967b4d8d3761d14e026a93b4716e35e52b2e434f52c1666f
-
SHA512
cfdd34bc33d3506eeedc2964de52f1456b4332bdcca434bbb7d53dade5795f343ec0da94d89873b88862dd5289c18fe0c07f5427a63da96b17140e53879069fa
-
SSDEEP
3072:v9q4sOTGQJYwkoR3snf9Cvz63qT1mrYGvwFyjcNloCNAQ:Fq4sSnCAvummkGoxloCNAQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c75dce2d4c246a315a8fb5f345c41719
Files
-
c75dce2d4c246a315a8fb5f345c41719.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE