Behavioral task
behavioral1
Sample
c80d72552869773627ddc084ebb2011b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c80d72552869773627ddc084ebb2011b.exe
Resource
win10v2004-20240226-en
General
-
Target
c80d72552869773627ddc084ebb2011b
-
Size
5.8MB
-
MD5
c80d72552869773627ddc084ebb2011b
-
SHA1
0ebf5537f804e6523f5a8ad85482aa74136313cf
-
SHA256
4cb7271a75bbf33d76e51f347b97487ed66291554931c941a87c623ee201d641
-
SHA512
af55df97c9c945b0b80b382c1b06ee0fc24e80f67092190f8d030548d3759f72f1d0f53258d75f369a579d7ee670065cd4bd2142e55cc4611282efd377f4b10f
-
SSDEEP
98304:3v5x8njLY299W4HBUCczzM3esOJhV3fi+ekIAjs4HBUCczzM3:3Bxuj1WC6s+Y+xhDWC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c80d72552869773627ddc084ebb2011b
Files
-
c80d72552869773627ddc084ebb2011b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE