Behavioral task
behavioral1
Sample
c885c2248bf34ecd824d653e9549c3dd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c885c2248bf34ecd824d653e9549c3dd.exe
Resource
win10v2004-20240226-en
General
-
Target
c885c2248bf34ecd824d653e9549c3dd
-
Size
68KB
-
MD5
c885c2248bf34ecd824d653e9549c3dd
-
SHA1
479e58d0ea43c2543c5745acaa3c15e60d81333d
-
SHA256
e11b6b204108f8bf43700a2c387fbb58901874695fd241c3ccf7b9f3c6f1a2cb
-
SHA512
b427d6333fdcd77922b07c529ec978fecc21c68302a6e7e7d6aef6a0d6049b067e9efc674a622db3d7bc7fbe9b07d85ac811fac4483823f12837876cf6a408c0
-
SSDEEP
1536:nhEg8K5qZjN2mp3CT3YsvKGJd21LLwocNf49yX8acxiT2O:KdD3CTIsvKGSL55H9dO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c885c2248bf34ecd824d653e9549c3dd
Files
-
c885c2248bf34ecd824d653e9549c3dd.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE