Behavioral task
behavioral1
Sample
c88f1f906845547ab3a69b5a28315347.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c88f1f906845547ab3a69b5a28315347.exe
Resource
win10v2004-20240226-en
General
-
Target
c88f1f906845547ab3a69b5a28315347
-
Size
133KB
-
MD5
c88f1f906845547ab3a69b5a28315347
-
SHA1
aad30761f7c992a6353c1905a1318ca4793f8d64
-
SHA256
8889fc2f3cdaa0fbb2280c4e436a946050a39c1dc30cfa7793f33e60705adc53
-
SHA512
d7b3a3e896467e961e4175b1649373740092d9b7c3ed5ed5556741c7757e2175669a3b35e4410acecaeeb114c97039cedede86f779e191f9a449bbca38ab57ec
-
SSDEEP
3072:HrzN7Xj2mwTYp1dAQf6MlAHRCC/iiWa5cbaPR3a3Qf3BtrQ:HrzNPp1eQfTi/iLicbaky3BdQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c88f1f906845547ab3a69b5a28315347
Files
-
c88f1f906845547ab3a69b5a28315347.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE