Behavioral task
behavioral1
Sample
c8544479b53e85b8b7c16413a7d22b13.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c8544479b53e85b8b7c16413a7d22b13.exe
Resource
win10v2004-20240226-en
General
-
Target
c8544479b53e85b8b7c16413a7d22b13
-
Size
266KB
-
MD5
c8544479b53e85b8b7c16413a7d22b13
-
SHA1
83c00c69f768ee50fe81cad9e17035d31dbd6d42
-
SHA256
153a419a422b4df806ba523457ada46627c7f3794a170025c98ab292964a291a
-
SHA512
802672fd3c46706cd679d5120be3853fc69d89602f2207a66c4b84d7bdd0d9fba626ff9dc24c4f0da2a3f9bc890fd149c3cee0e17e59519025bbe75356fe0b3a
-
SSDEEP
6144:cTzukNJiOYFqeQnfXiK7imxDetRn5Xwj30mUXpzBqQ:uLNJPpa8imxStRn5u65d/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8544479b53e85b8b7c16413a7d22b13
Files
-
c8544479b53e85b8b7c16413a7d22b13.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE