Behavioral task
behavioral1
Sample
cff9c5583d8bbc0aba328311488a291a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
cff9c5583d8bbc0aba328311488a291a.exe
Resource
win10v2004-20231215-en
General
-
Target
cff9c5583d8bbc0aba328311488a291a
-
Size
10.2MB
-
MD5
cff9c5583d8bbc0aba328311488a291a
-
SHA1
48271eafab43f8d3ab2dc6b63ea3b7740f27325b
-
SHA256
09199eb8f479720d93c37d66a408336fe7cefb9fe22bfc5171dde0acb1fbedee
-
SHA512
48e8a87bf83f2a0476c4b902da394ffbb8c3c245134e1ee7b0d22439b0430e1179c8154b02f8a6e43e92abe9a59b39a00c45eb822f972db9ef1e7c9b8b506c61
-
SSDEEP
196608:dzd3P02HeHXYi5FWZ2dFKR3jmTHOQyi5FWZ2dFK:r3EYiT82Ujau1iT82
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cff9c5583d8bbc0aba328311488a291a
Files
-
cff9c5583d8bbc0aba328311488a291a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE