Behavioral task
behavioral1
Sample
c55eab0f02991f64fb27dfee83b19872effeb539b83bfc439e44d35b70298489.exe
Resource
win7-20240903-en
General
-
Target
c55eab0f02991f64fb27dfee83b19872effeb539b83bfc439e44d35b70298489
-
Size
576KB
-
MD5
2093a76fc4560b1e6230ae399202a7b8
-
SHA1
7dc040ffd5d7f8412b37e23b79c6942a28d10747
-
SHA256
c55eab0f02991f64fb27dfee83b19872effeb539b83bfc439e44d35b70298489
-
SHA512
bb9ff9b5d9022a64f24fc79f6c26f57f3ab1bca8e2416fe3315df74787a5d762043eb3943d62541f135c7f79ae939f4363642ac49d95f32e6d84218735c90735
-
SSDEEP
12288:+NWPkHlUkErBuxQ4uzi6d6dL/yiXLzeMdK6io8levy0FhVlpzkzDDoSO:+NWPkHlUfBgpuPdWzyuDTifgyWlX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c55eab0f02991f64fb27dfee83b19872effeb539b83bfc439e44d35b70298489
Files
-
c55eab0f02991f64fb27dfee83b19872effeb539b83bfc439e44d35b70298489.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 572KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE