Behavioral task
behavioral1
Sample
c8e00b7355964601edae11beeb1ba51f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c8e00b7355964601edae11beeb1ba51f.exe
Resource
win10v2004-20240226-en
General
-
Target
c8e00b7355964601edae11beeb1ba51f
-
Size
2.7MB
-
MD5
c8e00b7355964601edae11beeb1ba51f
-
SHA1
1fa82baf2eb957b9febe5e09bc389fe5cfffe260
-
SHA256
d056d576e6925b31ede0d6d1fce76dbcad673e8fabbfed2b6c6891f9fd7d1cdb
-
SHA512
f9890baa4a80c08b26ad9542a2f82d42774da4e9478020a0027650de3d1e32d88d87aad7bfa2feb28295cd8d237afb959f43f6599d3893d47313a532868d7607
-
SSDEEP
49152:H4E4eFwEneZbmbp1y4UG+M6mCR94Lub8cBrvb072t6AHnKb9UkgjHDEwwR9j:YE4swEeJAplUH4qAgvb0+xKb9NsjjwHj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8e00b7355964601edae11beeb1ba51f
Files
-
c8e00b7355964601edae11beeb1ba51f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE