Behavioral task
behavioral1
Sample
fc44191fe105531c403bff7db64606dd5ea74bdeafd72d4161af04126e286d60.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fc44191fe105531c403bff7db64606dd5ea74bdeafd72d4161af04126e286d60.exe
Resource
win10v2004-20240802-en
General
-
Target
fc44191fe105531c403bff7db64606dd5ea74bdeafd72d4161af04126e286d60
-
Size
223KB
-
MD5
9f2ca9d43732e0118f49c4b709d969c2
-
SHA1
19435efedcf96d56867777109fd3905aa900c843
-
SHA256
fc44191fe105531c403bff7db64606dd5ea74bdeafd72d4161af04126e286d60
-
SHA512
b2d32794354a6f59fe9bc43e69957414628013528ffe6650cd82b0b3d185a313185ad72b8146e67c570c4b2912d888542b55e0f4fffa2ec51df55f5972d9ed0a
-
SSDEEP
3072:fnyiQSoUw9mHpKZNGCLOwstyhZFChcssc56FUrgxvbSD4UQrO2ZTxx:KiQSov9UpK7ShcHUaZ/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc44191fe105531c403bff7db64606dd5ea74bdeafd72d4161af04126e286d60
Files
-
fc44191fe105531c403bff7db64606dd5ea74bdeafd72d4161af04126e286d60.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE