Behavioral task
behavioral1
Sample
c919264cba6feb93ad9b19fee24db647.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c919264cba6feb93ad9b19fee24db647.exe
Resource
win10v2004-20240226-en
General
-
Target
c919264cba6feb93ad9b19fee24db647
-
Size
10.6MB
-
MD5
c919264cba6feb93ad9b19fee24db647
-
SHA1
f5f871fd62ce79a20a0e5c885429e5b45d10d8a7
-
SHA256
e9ba2654c4202725458af8587389690b8811b3a97cc54b2679f2d7e39f3b7e48
-
SHA512
258d3c10c30a450679438422d76002c779a514eb3b5e15356a749eabcd772f96635871442722db2c7e767cee6569619ed0a20cdc87de06c31d2967f2100da2fb
-
SSDEEP
196608:ls2LVo+lI++rmAnj3gMUWYX9+xz+rmAnj3gMReEdkCOPh1+rmAnj3gMUWYX9+xzc:umBlI++iKj3LUZkxz+iKj3LIvL+iKj3U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c919264cba6feb93ad9b19fee24db647
Files
-
c919264cba6feb93ad9b19fee24db647.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE