Behavioral task
behavioral1
Sample
c2ab0eb3aa8642ce748982d75cf7085861a7c82dae6279bd4a0f413a3abf38b7.exe
Resource
win7-20240704-en
General
-
Target
c2ab0eb3aa8642ce748982d75cf7085861a7c82dae6279bd4a0f413a3abf38b7
-
Size
337KB
-
MD5
6dbb57df99178f1c990088d25aa8690d
-
SHA1
031edd2dc30abe7f27a55058a081c303e6c0abe3
-
SHA256
c2ab0eb3aa8642ce748982d75cf7085861a7c82dae6279bd4a0f413a3abf38b7
-
SHA512
175c8930b9979d36fe90c6b68111402628531a16cbb71e5031eb9e28794b0d6a919ee92473e2ba7a7d8357f48c09d29c85f2ab79d2aaac2e84924a980648c231
-
SSDEEP
6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1i/e:x4wFHoS3eFaKHpv/VycgE8oe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2ab0eb3aa8642ce748982d75cf7085861a7c82dae6279bd4a0f413a3abf38b7
Files
-
c2ab0eb3aa8642ce748982d75cf7085861a7c82dae6279bd4a0f413a3abf38b7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE