Behavioral task
behavioral1
Sample
c8929e214816789099f307ae1c986150N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8929e214816789099f307ae1c986150N.exe
Resource
win10v2004-20240802-en
General
-
Target
c8929e214816789099f307ae1c986150N.exe
-
Size
113KB
-
MD5
c8929e214816789099f307ae1c986150
-
SHA1
ade187a0dd00ffb194c0904ade4b7653f804faa0
-
SHA256
60b39f1aef54604d484138d2205c5ede28d9b064c2e2a140a9c8062ca87b08a9
-
SHA512
375776fa200674d0c50ef2b415ac7e6eab6ecd54841c3af6393efbd5d4645c1d2db008f19db03373341e205cb98b8f764c2b55ec450ec809f910fcc33f69ea09
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rx:V7Zf/FAxTWgGpGd7Zf/FAxTWgGpG1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8929e214816789099f307ae1c986150N.exe
Files
-
c8929e214816789099f307ae1c986150N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE