Behavioral task
behavioral1
Sample
c2198f3f139926cddd3dabfeae94ec1f315a3f28c57f9d41f0f94e6e0bff0be2.exe
Resource
win7-20240903-en
General
-
Target
c2198f3f139926cddd3dabfeae94ec1f315a3f28c57f9d41f0f94e6e0bff0be2
-
Size
6.4MB
-
MD5
4c8aebf0c12d385f411fe744a2ae1ba8
-
SHA1
289cc837d26e9e3b3b0c6eaf6c35d7e2834146ca
-
SHA256
c2198f3f139926cddd3dabfeae94ec1f315a3f28c57f9d41f0f94e6e0bff0be2
-
SHA512
dce7ed0b7d6d36f9437ab6dae4a4a22d1d649c55b38ababc2bbae6e51448fe3fb3e0c2d77353092267dba20b7493368a1c2b769a515ceed715aeb34bc2044743
-
SSDEEP
196608:YBg0Xse8PxfJpRtokSY/UtcnYH0FicTMUC7Kz7qeIdSJ:gzIPLto0UcYH0YKzNId+
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource c2198f3f139926cddd3dabfeae94ec1f315a3f28c57f9d41f0f94e6e0bff0be2
Files
-
c2198f3f139926cddd3dabfeae94ec1f315a3f28c57f9d41f0f94e6e0bff0be2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 8.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE