Behavioral task
behavioral1
Sample
cc85b1b95809b87638eac6997565008c.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
cc85b1b95809b87638eac6997565008c.exe
Resource
win10v2004-20240226-en
General
-
Target
cc85b1b95809b87638eac6997565008c
-
Size
2.0MB
-
MD5
cc85b1b95809b87638eac6997565008c
-
SHA1
91cdcae652d5cd503b39e03440b37a1b41960b3d
-
SHA256
0aaf89bd8c98facaad04fb110342d164df599ab3ce649043f8f4deca7e772163
-
SHA512
c7e3fe276eb1ea60ffd9078ac7544468db857e34e36d74e9341f4c2e1e1759cb0dc4224ef7eb50c873d4daa96e00d96cd0bb53baa9cae2eb0a43e4f31b010069
-
SSDEEP
49152:GwMrFWmv6KuVewL8eZHD1pIT5ckIl7nhiL8eZHD1pIT:G/r4mv6KLwAAHD1pIT507nhiAAHD1pIT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc85b1b95809b87638eac6997565008c
Files
-
cc85b1b95809b87638eac6997565008c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE