Behavioral task
behavioral1
Sample
fc5bec15b931d668055f987407d967aa03bbc7d16faf8f76e3fff7f9bd064a2e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fc5bec15b931d668055f987407d967aa03bbc7d16faf8f76e3fff7f9bd064a2e.exe
Resource
win10v2004-20240426-en
General
-
Target
fc5bec15b931d668055f987407d967aa03bbc7d16faf8f76e3fff7f9bd064a2e
-
Size
600KB
-
MD5
3b793f2568c965386ea1a0f77268a0f5
-
SHA1
b51cb85d7cf35a85f05ea5afba02d1bea0e93590
-
SHA256
fc5bec15b931d668055f987407d967aa03bbc7d16faf8f76e3fff7f9bd064a2e
-
SHA512
534b3249c55b2e7337f2056fddf01b9a568811dc32d2d7c241a99415748ba5c95fd3c50d0bcdf875d288c0ae7a8c5ea136ec8df3b486bccb6e00e97c82ef8c9d
-
SSDEEP
6144:cwKyE/JIHJDx/tCC9wM6YICa30A9VsRbK543K72IOupB5:c1yEBuJDCCFYKKG3IOuJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc5bec15b931d668055f987407d967aa03bbc7d16faf8f76e3fff7f9bd064a2e
Files
-
fc5bec15b931d668055f987407d967aa03bbc7d16faf8f76e3fff7f9bd064a2e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 668KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 588KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE