Behavioral task
behavioral1
Sample
cfeef0caa7b59cf98304c0d7fd346feb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
cfeef0caa7b59cf98304c0d7fd346feb.exe
Resource
win10v2004-20231215-en
General
-
Target
cfeef0caa7b59cf98304c0d7fd346feb
-
Size
1.6MB
-
MD5
cfeef0caa7b59cf98304c0d7fd346feb
-
SHA1
a5c3b2cec72bb7e1b22b7baa65fa578c8c3cc9f4
-
SHA256
a76c1563770aa629abfd96dad8ecee20a04e629560f049643e147d2eb95b4a86
-
SHA512
575b92ae25ce7a0b9b6a7b5f36b0a442203558facc224adb2dd3e04df932bf112722a6c324565e90667503fbfd3ff1e2a8943571d57047419eade44f6cbd55eb
-
SSDEEP
24576:pwbV9FIp14lFRkVkrSRMHW9N84LxhnS6QDT418KrG8AdkSV7NKAd8uGWI0td:pCug2krwMHz4/yTL0GRiSVJKAd8uGP4d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfeef0caa7b59cf98304c0d7fd346feb
Files
-
cfeef0caa7b59cf98304c0d7fd346feb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE