Behavioral task
behavioral1
Sample
c874314b4d1a8fcbbf4abb2e3eaf5469.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c874314b4d1a8fcbbf4abb2e3eaf5469.exe
Resource
win10v2004-20240226-en
General
-
Target
c874314b4d1a8fcbbf4abb2e3eaf5469
-
Size
1.3MB
-
MD5
c874314b4d1a8fcbbf4abb2e3eaf5469
-
SHA1
5e81d857f2f5d7bb041bbd966375572ddc819400
-
SHA256
9e08f9ee6cbef032aadfd5e3030d7df872b18056f43b43ca1482f4f7289eae43
-
SHA512
e0efd64664a78b691b85aee57a515c5e2d766d58a0a728b79ae4e9ea686cef8dd83d98ceee4f337c9f180db705cdcde65184243e5cc7c1f0f3f8b75dfffd750e
-
SSDEEP
24576:5hHhCzH8pd3lpdKLPWUbvBen+qrFqmKjSVFHV+J83o/fU9/9Us:5focn1pdKLOIvkn+QY3j89V+exR9j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c874314b4d1a8fcbbf4abb2e3eaf5469
Files
-
c874314b4d1a8fcbbf4abb2e3eaf5469.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE