Behavioral task
behavioral1
Sample
ce3e4d71e1d6aa1b0fcee3c0580a4004.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ce3e4d71e1d6aa1b0fcee3c0580a4004.exe
Resource
win10v2004-20231215-en
General
-
Target
ce3e4d71e1d6aa1b0fcee3c0580a4004
-
Size
5.3MB
-
MD5
ce3e4d71e1d6aa1b0fcee3c0580a4004
-
SHA1
f4fcd0a40a3ea09bf8632c0a1afc32064d1f0435
-
SHA256
7183fa5b94f0d234a1f3a8336e696e71d2a1c59ce17330115ac55558bee4a954
-
SHA512
6ce39ec410bca89c5b97b8f35f825a0321de8437ef3c3d9283a529e6936f19ac4dac68c69fc5a651bc1da9def3af6d8c31f33b3a0f01e7c2f55c6735ab917d68
-
SSDEEP
98304:gLGHr0SmygHahg/xNalSIRsWjHQa4UGD2lh5E9DcgVgZHahg/xNalSIRsWjHj:gyF8fOlSIJzzgDEfOlSIJD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce3e4d71e1d6aa1b0fcee3c0580a4004
Files
-
ce3e4d71e1d6aa1b0fcee3c0580a4004.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE