Behavioral task
behavioral1
Sample
cb04ae9e5a4fcadcc6c692d4c412a885.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cb04ae9e5a4fcadcc6c692d4c412a885.exe
Resource
win10v2004-20231215-en
General
-
Target
cb04ae9e5a4fcadcc6c692d4c412a885
-
Size
5.8MB
-
MD5
cb04ae9e5a4fcadcc6c692d4c412a885
-
SHA1
f42a339b78b09a434879c785d2c50fd3be0cb2bf
-
SHA256
2a0f0f9cbf75deba88d988e9f02180027bd76cd03266c3698c94f6ef9fb0e0cd
-
SHA512
b4706e9e9c296fc44b842dadaf9487594a384ec247185a7567b677c0e362da457c6c742d2d7011bf6274bc588b49845977f236ee9bcca4e2d15328e0d429c609
-
SSDEEP
98304:i3b8toQwKyq3Jgg3gnl/IVUs1jePsHjYrhRNm7yEzgg3gnl/IVUs1jePs:s8y76Pgl/iBiPwakLpgl/iBiP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb04ae9e5a4fcadcc6c692d4c412a885
Files
-
cb04ae9e5a4fcadcc6c692d4c412a885.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE