Behavioral task
behavioral1
Sample
c89cc0886f37a7212cf4e78f28e4178b.exe
Resource
win7-20240220-en
General
-
Target
c89cc0886f37a7212cf4e78f28e4178b
-
Size
1.5MB
-
MD5
c89cc0886f37a7212cf4e78f28e4178b
-
SHA1
0f4f402b39761a95e5f685be087080bdc43a13de
-
SHA256
752175b188ee1ef17c968683524c6cdd91c2d3d6e6428752716964e28df57134
-
SHA512
77688d4ef3deec6b912dbd0f961fc8a8a970c8d8e40f27dad818a76cb6594314eaeae5e44b4a4ad52fdf5a22ec4e11a814706d1d9c53ae86561460f36a0ee53b
-
SSDEEP
49152:KRa10qT+Kbht9vI+syMVFXuq8pTVblhoO8sSdX:PqqTd6+g8pTVblhoO8hX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c89cc0886f37a7212cf4e78f28e4178b
Files
-
c89cc0886f37a7212cf4e78f28e4178b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE