Behavioral task
behavioral1
Sample
0cdda7141766ae8913e20fbe899d8563.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cdda7141766ae8913e20fbe899d8563.exe
Resource
win10v2004-20231215-en
General
-
Target
0cdda7141766ae8913e20fbe899d8563
-
Size
80KB
-
MD5
0cdda7141766ae8913e20fbe899d8563
-
SHA1
79917c6455e72f18cf8f714e29b51eca2344ef52
-
SHA256
90ef2875db4699c5fb98e26040da184749e18dd6ffacd2857007e49259d0301e
-
SHA512
058ee94d0697354f6793e86de2dd303893253c9668ccbd5b8573f1e900142b06a38987c60e1763d0f7e5903f3ed23749ae98afafa1c5ec869576de067d6c8877
-
SSDEEP
1536:EPRIfwumjllDVL1qmCfN0QfbzPdIBtX5pZZmnlg60CmuJd4BXL:iRIfojlBnCKQfXCLjwy6Bbd45
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cdda7141766ae8913e20fbe899d8563
Files
-
0cdda7141766ae8913e20fbe899d8563.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE