Behavioral task
behavioral1
Sample
c92ca068818fe50a2ba9595817f2b724.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c92ca068818fe50a2ba9595817f2b724.exe
Resource
win10v2004-20240226-en
General
-
Target
c92ca068818fe50a2ba9595817f2b724
-
Size
52KB
-
MD5
c92ca068818fe50a2ba9595817f2b724
-
SHA1
d396d6e075f7d6b4e15e789def92acad277f4c59
-
SHA256
bd345073ad76697db87404f0d1d9b609a47ed6f0ae0a8765c792d8aae90b68d2
-
SHA512
be4315b367efd87ebdb467a4351612f915eed3ec140d0fb8e9cbf2c5c11814701dac65865ff974cee58cb15c2dc79b14ff7f7d53b7b9a338850d12448eba96ff
-
SSDEEP
768:BtzO3aQSFZZ/ig6XgzsZEZGERiPKLS32SJXtxF0+gPmORb605mGlC0ZYBgspEpEq:7z6qZ3fZyb3XtxqXPt3lrgoEYgxcx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c92ca068818fe50a2ba9595817f2b724
Files
-
c92ca068818fe50a2ba9595817f2b724.exe windows:1 windows x86 arch:x86
70855c849d16392e3441bc39754c9edd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
comctl32
InitCommonControls
gdi32
StartPage
user32
ChangeMenuA
msvcrt
strcpy
Sections
UPX0 Size: - Virtual size: 524KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE