Behavioral task
behavioral1
Sample
c1ac4bea004dfc7259d27951c403b730N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c1ac4bea004dfc7259d27951c403b730N.exe
Resource
win10v2004-20240709-en
General
-
Target
c1ac4bea004dfc7259d27951c403b730N.exe
-
Size
3.1MB
-
MD5
c1ac4bea004dfc7259d27951c403b730
-
SHA1
17f0dd02ea656725db78a6dc2ec8ccb8027e0be8
-
SHA256
975c43307e793599dea9372a773b1432efe643c56cb4b386119616e1603ddd45
-
SHA512
bf2aeb1345665f4f690f9219701c4306663045ade9fce41678d81ff6f9192bb55392b7a663203b7ed7edcac10fe473b3657068b8d2c102bb54308183b5cd7f26
-
SSDEEP
49152:q7iyqrHnwUA3S/Wi0lnYZb/oWjXsN0Q5biICLXt4H6dUYq:FZb/8HAq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1ac4bea004dfc7259d27951c403b730N.exe
Files
-
c1ac4bea004dfc7259d27951c403b730N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE