Behavioral task
behavioral1
Sample
cab1386a74f8f498a05b99e5e5453fea.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cab1386a74f8f498a05b99e5e5453fea.exe
Resource
win10v2004-20240226-en
General
-
Target
cab1386a74f8f498a05b99e5e5453fea
-
Size
475KB
-
MD5
cab1386a74f8f498a05b99e5e5453fea
-
SHA1
4dfbec255a9bcbd79a976c6368b00e1e03d8e8f5
-
SHA256
5c96988c45f72818c83a1cbdadee0558633262a74c77290c5792f5f6e0e297d0
-
SHA512
c877ffcb6dba6844e1c9f3bc9bfb6c83c93aac8f2a6ca26a93ec7f1ee62cf5f2bb552be0f74f7a5cdf6fc6afdd5fec1facc52ad0497f655ef0d18a910344d415
-
SSDEEP
6144:xMkSc2bG4iNbXIcmgVHr6gBCCe5dl3dx3IsBX7Ag3b4K5dRdgXUIS:VSc21KUcmvCe5dlNNBX7AIj5dRdgm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cab1386a74f8f498a05b99e5e5453fea
Files
-
cab1386a74f8f498a05b99e5e5453fea.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE