Behavioral task
behavioral1
Sample
00cfd90ca7119e01aecbcb890eaaddda.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00cfd90ca7119e01aecbcb890eaaddda.exe
Resource
win10v2004-20231215-en
General
-
Target
00cfd90ca7119e01aecbcb890eaaddda
-
Size
2.0MB
-
MD5
00cfd90ca7119e01aecbcb890eaaddda
-
SHA1
a22048d1d8dea4219dc22b84658500315bd7d6b1
-
SHA256
579201f34c94a79fe0a2b1b3881d7572e0de449fa6f46f11aa12c43c7352a808
-
SHA512
39697b18ca3d891307fd9b0fa7c25d529b094dd7acfb6a22f3091b9cf067217609ab1f008289f0e3534da93564d3f21566415d82e9e60daa30468d732ea96c3a
-
SSDEEP
49152:+1gel2jS7l1SR8+GQ7ai7D3xTgOxYwpKSiGn6DphgPJ/KnbJCGQ7ai7D3xTgOxYj:+1zl2jkK8+D2i7D3xkOxYwpKSiG6D0Pc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00cfd90ca7119e01aecbcb890eaaddda
Files
-
00cfd90ca7119e01aecbcb890eaaddda.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE