Behavioral task
behavioral1
Sample
c89cb131ea20aa88a229ad73d40668b3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c89cb131ea20aa88a229ad73d40668b3.exe
Resource
win10v2004-20231215-en
General
-
Target
c89cb131ea20aa88a229ad73d40668b3
-
Size
893KB
-
MD5
c89cb131ea20aa88a229ad73d40668b3
-
SHA1
cdb13332a107b0da9622cab3d294974fde5fc058
-
SHA256
ea26e22bfae9392085a3f9bfa816fea8a124e39c591b7d530f85430a1c6b0aff
-
SHA512
702ab5f3eb2b9f8994a760ec12cebc9b617e831f326b2da8dd6b6f93f345bc0a94a0c690fcf3563676041c7c7b3b2e9d18ad88901303f9ee53f18bcc5db3a7ca
-
SSDEEP
24576:v5qNlxYulzOj5KLQD/QCsX1DV54EIDGoPow+Fv:vXugV3YZlx54EemBF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c89cb131ea20aa88a229ad73d40668b3
Files
-
c89cb131ea20aa88a229ad73d40668b3.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
UPX! Size: 425KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX! Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX! Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX! Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX! Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX! Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX! Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 422KB - Virtual size: 9.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX! Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE