Behavioral task
behavioral1
Sample
cb79f1fd99b02ce1ec0154b5bcce862f.exe
Resource
win7-20231215-en
General
-
Target
cb79f1fd99b02ce1ec0154b5bcce862f
-
Size
784KB
-
MD5
cb79f1fd99b02ce1ec0154b5bcce862f
-
SHA1
eb44f96c6cccf97786c4e303758bff24ec122232
-
SHA256
6900014cd95d78d2287d472788676591e68d24a8a80edb9b109af20d12f3981b
-
SHA512
f47d8eeb17c7511f54d3cc88fc29d8361fef043d200eb5085ff85e1935d41521e2d1b6f589667a013f5b8d193dc54c559b2e5f4cedd2d1da5d03ba8c7d331a45
-
SSDEEP
24576:3CvMBpzBubziXspODLH7XtlECtj7BDcreNI3dlWsK:MmtBun86MLrtlE6j7Sa8T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb79f1fd99b02ce1ec0154b5bcce862f
Files
-
cb79f1fd99b02ce1ec0154b5bcce862f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE