Behavioral task
behavioral1
Sample
c3cf02d4c6823bcee5b9652df4de72618dea1e8af8eda13f9c5fa0b7ff7aa8faN.exe
Resource
win7-20240729-en
General
-
Target
c3cf02d4c6823bcee5b9652df4de72618dea1e8af8eda13f9c5fa0b7ff7aa8faN
-
Size
345KB
-
MD5
7b128cd5e5e742bb3efddcb4f97b9c00
-
SHA1
c1877bb38edd70be151c2a29b9a3e42b6c099613
-
SHA256
c3cf02d4c6823bcee5b9652df4de72618dea1e8af8eda13f9c5fa0b7ff7aa8fa
-
SHA512
a381afb3f502051eec3382d7b592fba1803ee032f7e8b830e23568d06e4228f7f437f2131a13d86d3e61afd83bcf5c5327b98a767719d8c783b890cd105feab1
-
SSDEEP
6144:8uIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLqIYhuIlWqBh:X6Wq4aaE6KwyF5L0Y2D1PqLb6WqL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3cf02d4c6823bcee5b9652df4de72618dea1e8af8eda13f9c5fa0b7ff7aa8faN
Files
-
c3cf02d4c6823bcee5b9652df4de72618dea1e8af8eda13f9c5fa0b7ff7aa8faN.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bldvar Size: 38KB - Virtual size: 196KB
BSS Size: 12KB - Virtual size: 192KB