Behavioral task
behavioral1
Sample
c4cdcd2bcf5a08b4c8edfe3eb5b2a5d28e0f56dc3940fba760ab1e311053d221.exe
Resource
win7-20240903-en
General
-
Target
c4cdcd2bcf5a08b4c8edfe3eb5b2a5d28e0f56dc3940fba760ab1e311053d221
-
Size
14.2MB
-
MD5
4e469bfd71d7fb4c65b5d6488842a91f
-
SHA1
a164bf56bf99b680c0f4c2c524ebe116bad2fffd
-
SHA256
c4cdcd2bcf5a08b4c8edfe3eb5b2a5d28e0f56dc3940fba760ab1e311053d221
-
SHA512
c9398440dd7f4737a8379f122d33fd8bf14d23b315a75254133ad1d4ec51079c594c3d27d33074cb129ab5f1ac0e0b314341433529710d06f45568a262c77dc4
-
SSDEEP
393216:QHep96Cl1L8FusVwwsG9LEhwjGKE1MjC0ouYQ0VHxlOzdH:QHkpjL80sVwwriB2muClO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4cdcd2bcf5a08b4c8edfe3eb5b2a5d28e0f56dc3940fba760ab1e311053d221
Files
-
c4cdcd2bcf5a08b4c8edfe3eb5b2a5d28e0f56dc3940fba760ab1e311053d221.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 215KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE