Behavioral task
behavioral1
Sample
2c446626c42e0b6141162c9911e35599078c5e7a0ec3fb8bb9046a565fcd912c.exe
Resource
win7-20240729-en
General
-
Target
2c446626c42e0b6141162c9911e35599078c5e7a0ec3fb8bb9046a565fcd912c
-
Size
8.1MB
-
MD5
36ba05369fe9e05ee0cbf55b7577b60b
-
SHA1
970e98ffceb198ea4df4990144d82a9b7fd3cd43
-
SHA256
2c446626c42e0b6141162c9911e35599078c5e7a0ec3fb8bb9046a565fcd912c
-
SHA512
768a384f19f72cad9a2c1df526ac034fba9da3a979c7d3718e17c1311f1abb76fc543f3ffa0295848c8fbe7c7cf603f770aadd85862a44fc5748afde597a173d
-
SSDEEP
49152:VQ13z5bJtaVMJyoaVCJ/3z5xJtaVgGJ2oaVTG6FuznwI5fm8BSQVtocQ96iocQ9R:70RXRDO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c446626c42e0b6141162c9911e35599078c5e7a0ec3fb8bb9046a565fcd912c
Files
-
2c446626c42e0b6141162c9911e35599078c5e7a0ec3fb8bb9046a565fcd912c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE