Behavioral task
behavioral1
Sample
cadac4a1cc09865fb62d62e449126948.exe
Resource
win7-20240221-en
General
-
Target
cadac4a1cc09865fb62d62e449126948
-
Size
784KB
-
MD5
cadac4a1cc09865fb62d62e449126948
-
SHA1
56ff51f6738abe48a862987f4fa1ab3f73772154
-
SHA256
75a7727c21ee9af0d1ee190a645ec56f273a0d63931199b181655bc22c04132a
-
SHA512
ad4e983d57765af9cb163d7589abde6cfc18d918534bfadf27d1da8d418e537280d379cbb5f72aee3453d4277dea4f4e8f41952b243306e4b1c801a4ffbfdfef
-
SSDEEP
24576:FYOBu6a82OTE2v23V/vtYzWPEp8GAZwT4SyIbqXJS/A:Fb1ansv6/OzWPEplzTgIiJS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cadac4a1cc09865fb62d62e449126948
Files
-
cadac4a1cc09865fb62d62e449126948.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE