Behavioral task
behavioral1
Sample
c2a25eca837d4a01c4185dad045356e91480875a86d4ecff1e56681e1df21249.exe
Resource
win7-20240708-en
General
-
Target
c2a25eca837d4a01c4185dad045356e91480875a86d4ecff1e56681e1df21249
-
Size
1.5MB
-
MD5
0faadc707ada7b9523054f2fd7d97678
-
SHA1
ce32527a6af66f7cd177490cb6ab8d9b2e815291
-
SHA256
c2a25eca837d4a01c4185dad045356e91480875a86d4ecff1e56681e1df21249
-
SHA512
04f9254f7b607639dbc3bcbb9448c372e6b065887b0571e5c0fe0a57d865651dc3d4f424c49ac02e9b3f58d21d984ffce16807f49c51fa97c1c8f6b7320e3fb5
-
SSDEEP
24576:m5wiQOFD1iFeKG4zpcjukL2r7kPSnToZ7IVoCVazIcjukL2Y:+wiQisBG4zpcakL67kPSnToZUtVa8caM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2a25eca837d4a01c4185dad045356e91480875a86d4ecff1e56681e1df21249
Files
-
c2a25eca837d4a01c4185dad045356e91480875a86d4ecff1e56681e1df21249.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE