Behavioral task
behavioral1
Sample
c8fc62bc05cbf3021dcc91e02d51ce8b.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c8fc62bc05cbf3021dcc91e02d51ce8b.exe
Resource
win10v2004-20240226-en
General
-
Target
c8fc62bc05cbf3021dcc91e02d51ce8b
-
Size
133KB
-
MD5
c8fc62bc05cbf3021dcc91e02d51ce8b
-
SHA1
0cc7e8babd5d633235d3614f159866abeab099c5
-
SHA256
f87337000ebee31bafde37e2ad2f7b7cd3fd1df1bc1ed236e9c3ee9a3d590cad
-
SHA512
8f93af05565b70635bcb93b732107870470c17e9623508d53e2b0b246bcb35aea5d9dba1ed63c97f7d98778bdbfd4cd60f2a8f022e07f2266e10eee81249ba68
-
SSDEEP
3072:Y3JEu0KjU/AU0GDfgIeJUpPwsyDbR7MRdAurkBgabbSR7wQ:0EMABzeJY4Pb1SSeNwQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8fc62bc05cbf3021dcc91e02d51ce8b
Files
-
c8fc62bc05cbf3021dcc91e02d51ce8b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE