Behavioral task
behavioral1
Sample
c8ad57f05953c23bdc25e26fcb449134.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c8ad57f05953c23bdc25e26fcb449134.exe
Resource
win10v2004-20240226-en
General
-
Target
c8ad57f05953c23bdc25e26fcb449134
-
Size
3.9MB
-
MD5
c8ad57f05953c23bdc25e26fcb449134
-
SHA1
8c8cded65e06d0a25d2d7303214c89a8444676ca
-
SHA256
56cccd64b0c3952010b5ed676411bd5c4e5e94a2bf44a8d6bb8b260a597bf1bb
-
SHA512
dd755ca7003f7e87307908d476c0858fa7697941c13381e570322e18a0fc7d4fc5a01a23560e356bc26b89dc2a9fb86ac98b8c47b67eb89114adf28b529ad5a4
-
SSDEEP
98304:A1zJAQApE+J9D2i7D3xkOxYwpKoTwr4ve44goD2i7D3xkOxYwpK0g0jAcL16D2i1:A2QA+u9h7FkNqKo0rkOh7FkNqK0tAh7p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8ad57f05953c23bdc25e26fcb449134
Files
-
c8ad57f05953c23bdc25e26fcb449134.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE