Behavioral task
behavioral1
Sample
cdd17ea45bfe4e8675dd4bbda554e5b2991816cc52e465460eada09b7b9a16c9.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
cdd17ea45bfe4e8675dd4bbda554e5b2991816cc52e465460eada09b7b9a16c9.exe
Resource
win10v2004-20230703-en
General
-
Target
cdd17ea45bfe4e8675dd4bbda554e5b2991816cc52e465460eada09b7b9a16c9
-
Size
13.8MB
-
MD5
da6bdf7f4c84c445f81a6942124effa7
-
SHA1
41f4a17051a7c4fad3fc73b9f2a979e6e5f6262d
-
SHA256
cdd17ea45bfe4e8675dd4bbda554e5b2991816cc52e465460eada09b7b9a16c9
-
SHA512
ee9c7db34b4fc61ac8d7f390a2e879f96b6c1cb840210243c682b5e852b3d063cbdafbfa5d23cf37200dd77cb5a44a1cb2a8397ecfa203767e7f5d7867970c90
-
SSDEEP
98304:NCwPQGKj8nOe/H5Nw9rlP6q+PybSgGGQgYkuOGve4scLl4U8P6KFv+s6uipzk:NPKj8nMNZ6HPy+gG7gNGwcL+U8Ys6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdd17ea45bfe4e8675dd4bbda554e5b2991816cc52e465460eada09b7b9a16c9
Files
-
cdd17ea45bfe4e8675dd4bbda554e5b2991816cc52e465460eada09b7b9a16c9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 9.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 13.8MB - Virtual size: 13.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE