Behavioral task
behavioral1
Sample
c51af547522af8ac58187854857051e4ad30b1323a3af77b38a1c50748b31a7bN.exe
Resource
win7-20240903-en
General
-
Target
c51af547522af8ac58187854857051e4ad30b1323a3af77b38a1c50748b31a7bN
-
Size
291KB
-
MD5
fc2b63a4ccfc6534ab76b434a2047d20
-
SHA1
0ac0aa2499bc7463aa950b2394c2ae6ccdfc99d0
-
SHA256
c51af547522af8ac58187854857051e4ad30b1323a3af77b38a1c50748b31a7b
-
SHA512
3a1778ca745c9ebdc6bd0f62695d82c2447c10ad565b8f962f35edda896d303733823b664c3b025624280d7d3c4d62e8395e57ac253752a4e6154f5a051722b4
-
SSDEEP
3072:eVOjLdYXyhDpEPAkeaUEZ6mabtCh4Dq5+xGnk/uS3b:eVO9YqVOHehNtzq5lk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c51af547522af8ac58187854857051e4ad30b1323a3af77b38a1c50748b31a7bN
Files
-
c51af547522af8ac58187854857051e4ad30b1323a3af77b38a1c50748b31a7bN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE