Behavioral task
behavioral1
Sample
c801904e515f80e4a9dc96cfd9217284.exe
Resource
win7-20240221-en
General
-
Target
c801904e515f80e4a9dc96cfd9217284
-
Size
68KB
-
MD5
c801904e515f80e4a9dc96cfd9217284
-
SHA1
5ace1dbceb750615cd5ac7f2929c17d7b8059c85
-
SHA256
9b2d3fce54d3747c02c65a0b810607abcb400a7f566334cd0436802db028c3d0
-
SHA512
ef0da31847b4f1fb5d7e693d61887d53019cb4d258f24ff25e489c04f9bae4b55f41e9184e330172c22c811efd6b84591096b938c0d6290e0d69964c4f6e1ba9
-
SSDEEP
1536:yRxGkI67CiWZy25p/u6Sei4rZLc+n76roly:DJ3J5s7On7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c801904e515f80e4a9dc96cfd9217284
Files
-
c801904e515f80e4a9dc96cfd9217284.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 640KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE