Behavioral task
behavioral1
Sample
fc3af4fd3687b13525113ba63a7591ef50e6a32f4d260b0891db8f80e01cffbd.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fc3af4fd3687b13525113ba63a7591ef50e6a32f4d260b0891db8f80e01cffbd.exe
Resource
win10v2004-20240802-en
General
-
Target
fc3af4fd3687b13525113ba63a7591ef50e6a32f4d260b0891db8f80e01cffbd
-
Size
91KB
-
MD5
51475bda21ed9dab46a87d4067dd1e70
-
SHA1
8330b1f1c241617816dc93c2d71a6cbe5a2c27b1
-
SHA256
fc3af4fd3687b13525113ba63a7591ef50e6a32f4d260b0891db8f80e01cffbd
-
SHA512
fd3d8768f3e4f2a8ba17b6668ccd0590bdcfb73274b0c2d8ea1fcc92d961c84d624785feb95463612180154d21ac75ee37a886fbda8b9ced366eee822b7972e7
-
SSDEEP
1536:QRsjdIZfaif4YrxCjjKnouy8VzyRsjdIZfaif4YrxCjjKnouy8VzK:QOyZy9wCjOouttyOyZy9wCjOouttK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc3af4fd3687b13525113ba63a7591ef50e6a32f4d260b0891db8f80e01cffbd
Files
-
fc3af4fd3687b13525113ba63a7591ef50e6a32f4d260b0891db8f80e01cffbd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE