Behavioral task
behavioral1
Sample
c5c462a0c2063e60e9d57fce50412b6f2e578f6510812f1b22cdf98800c89bae.exe
Resource
win7-20240729-en
General
-
Target
c5c462a0c2063e60e9d57fce50412b6f2e578f6510812f1b22cdf98800c89bae.exe
-
Size
2.0MB
-
MD5
641f1d2ede300392fd7b57022ecf9561
-
SHA1
c36f80fbc4d0f3cfa998db29bb3d47f1207fe898
-
SHA256
c5c462a0c2063e60e9d57fce50412b6f2e578f6510812f1b22cdf98800c89bae
-
SHA512
966a9ecad45e4b8895f25d8a7a1c07b08a26609593d5ffe08e26053b164b8464a3bdcaa8359ef40ec413ad9276d4d61bd968feb41c6ad9dad462e1a8083b2db1
-
SSDEEP
49152:8G0WEIuhtbQ5pqLUkgBn6X7KizfWh/KKlUm3eeu:8G0hIetb2iHi6Xxz+hC0u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5c462a0c2063e60e9d57fce50412b6f2e578f6510812f1b22cdf98800c89bae.exe
Files
-
c5c462a0c2063e60e9d57fce50412b6f2e578f6510812f1b22cdf98800c89bae.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reltc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE