Behavioral task
behavioral1
Sample
cf3c82ce76598a8e4d5f65d2bd95ea84.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
cf3c82ce76598a8e4d5f65d2bd95ea84.exe
Resource
win10v2004-20231215-en
General
-
Target
cf3c82ce76598a8e4d5f65d2bd95ea84
-
Size
1.3MB
-
MD5
cf3c82ce76598a8e4d5f65d2bd95ea84
-
SHA1
e7a26cb196797175cbf700997f6e08574db72e46
-
SHA256
5dba4ab6c1f16e0913248b8368065f149b210159fa033a35c7fdcc44b8acf7f8
-
SHA512
a955aff2fb6f1acd69bb58948e334660b75d52c2589a0a29f8d3cfca634b6b68277209251fdc09c18739da7d34038f3de16cddab4f87966ce9d9c914afb70027
-
SSDEEP
24576:qCkXy408yq/JkTL7fyDiRDEhnj0gRu/8tOAHb5vkkvjDov4j5iU9/9Us:IL0K/GTL7KGeBj0gRuWpnUg/R9j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf3c82ce76598a8e4d5f65d2bd95ea84
Files
-
cf3c82ce76598a8e4d5f65d2bd95ea84.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE