Behavioral task
behavioral1
Sample
c61a657f33fa5dd686a3aaf18e3452b75300d12d0baea29aaca18094811ef077.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c61a657f33fa5dd686a3aaf18e3452b75300d12d0baea29aaca18094811ef077.exe
Resource
win10v2004-20240802-en
General
-
Target
c61a657f33fa5dd686a3aaf18e3452b75300d12d0baea29aaca18094811ef077
-
Size
32KB
-
MD5
cb752328f7c966e85b1284980c867912
-
SHA1
3c438ac84c27b1ef8c0e3a5fcbfd99805b12855a
-
SHA256
c61a657f33fa5dd686a3aaf18e3452b75300d12d0baea29aaca18094811ef077
-
SHA512
3118a336fda9118b8964cac5fc1d41e7b4bb0155035011ed93b54cfce98b598f62375fd757fe5b2d4c9009368ae4e310a9f838743d5ffd31c95c0992e8fb96ef
-
SSDEEP
768:4noSEjp9Plchfr6TUqnbcuyD7UYK4pavvvZeee26666HEEExTtqqqqgtttZ:4oSEZWTUUqnouy8YXEvvvZeee5o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c61a657f33fa5dd686a3aaf18e3452b75300d12d0baea29aaca18094811ef077
Files
-
c61a657f33fa5dd686a3aaf18e3452b75300d12d0baea29aaca18094811ef077.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE