Behavioral task
behavioral1
Sample
cd9d74990547021542047844c6bfd84fda0c2a6d3886356f5edbe1c4d2671f9b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cd9d74990547021542047844c6bfd84fda0c2a6d3886356f5edbe1c4d2671f9b.exe
Resource
win10v2004-20230220-en
General
-
Target
cd9d74990547021542047844c6bfd84fda0c2a6d3886356f5edbe1c4d2671f9b
-
Size
352KB
-
MD5
f0bedd7550b5360569fc311a9d7e524e
-
SHA1
49940554fa2a741897cb7b7ff180593fa3f7c697
-
SHA256
cd9d74990547021542047844c6bfd84fda0c2a6d3886356f5edbe1c4d2671f9b
-
SHA512
6bf4b2b092e00b90332d43db50ceb39a7f0eadf2061cb752e1fb23987bd9ce68cdeece0d82bd2b6548f812d9071976d602a6abb820b5fd84c5058f70dd7dbd25
-
SSDEEP
6144:EPh0YRWDHIi3iQr6W6OJ0uA5EREvsnrkpAOof3i8K:EZ0YRM53iFONAORIsgpt9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd9d74990547021542047844c6bfd84fda0c2a6d3886356f5edbe1c4d2671f9b
Files
-
cd9d74990547021542047844c6bfd84fda0c2a6d3886356f5edbe1c4d2671f9b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 243KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE