Behavioral task
behavioral1
Sample
c7f34ce9690c0cc37cb624687e50d239.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c7f34ce9690c0cc37cb624687e50d239.exe
Resource
win10v2004-20240226-en
General
-
Target
c7f34ce9690c0cc37cb624687e50d239
-
Size
1.3MB
-
MD5
c7f34ce9690c0cc37cb624687e50d239
-
SHA1
63494b2a84a8bd7c395fd97ebef8f53bbed301ee
-
SHA256
12ec842376f03ccb7250978127a11a7786c099ffbe7abb855d3ca95f2aff3056
-
SHA512
f00ef12d8002a980b71fb499fd71d596d9d445fede41cadc80b1b05589c65eb850a8f903d5fa7c4a0fa81f3f833488c65d4169a376f3c16dc56008e5925a565d
-
SSDEEP
24576:17PlX8sE8O+Z8miINCM0lj902qZ2AueBW36WZ5QkQB3OJSmilIBbUVHSumbXvG:17P5bECZtzN4V9uZ2v36w5vQeSmi0b4K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7f34ce9690c0cc37cb624687e50d239
Files
-
c7f34ce9690c0cc37cb624687e50d239.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE