Behavioral task
behavioral1
Sample
c79c376d4edf918e968e4493ebf945b4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c79c376d4edf918e968e4493ebf945b4.exe
Resource
win10v2004-20240226-en
General
-
Target
c79c376d4edf918e968e4493ebf945b4
-
Size
922KB
-
MD5
c79c376d4edf918e968e4493ebf945b4
-
SHA1
990fdd4635b30145e69d4d1c86bce5c8ca2cd464
-
SHA256
e58e40ba9df196e228c7a555eae86996d07196aaf27c56f9de793a2ee2bda7ee
-
SHA512
e4e40c20a5361756a747bb9c82ce8402f1974a3ac1a2b3f83d040526158f0b5296c4867ca1848759fa28107cb638714c8ab5ce27a318f742fce03d204237e92f
-
SSDEEP
24576:RULSdFUG2wqkMB8HtDErAKj1x6ApAi47hq3UuSwcKVpRWy8g9:RU+P+wCBytor9D66Aiqhq3UxzWM6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c79c376d4edf918e968e4493ebf945b4
Files
-
c79c376d4edf918e968e4493ebf945b4.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 917KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE