Behavioral task
behavioral1
Sample
c93a6bcc4091571a0c747ea409bdf550.exe
Resource
win7-20240215-en
General
-
Target
c93a6bcc4091571a0c747ea409bdf550
-
Size
1.5MB
-
MD5
c93a6bcc4091571a0c747ea409bdf550
-
SHA1
5dec9525b3ecd1241684d7f91bb2ac535a989e09
-
SHA256
04183480c9f5ad3b4ca9bda9def35e971888e36aaf185129adb0f717711aee06
-
SHA512
05fd91aed954e42ba520b54a845005ecf56f3e323c9cdcaf7319d2a3a6a4afbd817caa053918c9d4208832b105a21245fc689cfb9eba49d3c3263e43345ed1df
-
SSDEEP
24576:+1QazkU8rQYnR+3HtRluiUrkqoLdjRm/imJL5jTZ/TNTTN6Ln7tVG4K:Izul+3sBrroLdFWDJL55NT56rG4K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c93a6bcc4091571a0c747ea409bdf550
Files
-
c93a6bcc4091571a0c747ea409bdf550.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE