Behavioral task
behavioral1
Sample
cb556553bf49a89c0f7b17615506efa2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cb556553bf49a89c0f7b17615506efa2.exe
Resource
win10v2004-20231215-en
General
-
Target
cb556553bf49a89c0f7b17615506efa2
-
Size
874KB
-
MD5
cb556553bf49a89c0f7b17615506efa2
-
SHA1
3a994c472fc514855a2daf1446db49d1e51c51d3
-
SHA256
3c01d62ada2728a7fb1b1b7f255bd459856ed5de7d469cf614eb5a6a1c5b6567
-
SHA512
bdab3f03f6f40f3327cefe70dec1a9590a9a86da92ea3264d8833882e3b4a58e87e3ae76dc104f85a63b8781235326248435c42f5a0c701e666787fdbf25ba5e
-
SSDEEP
12288:W7asePjz0Uo/PmTU6oGo7dBOTOLJcgamB0m2f7axFi4SSdzEnm4:W7a30UseTFoGohUaHBTUuxo64
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb556553bf49a89c0f7b17615506efa2
Files
-
cb556553bf49a89c0f7b17615506efa2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE