Behavioral task
behavioral1
Sample
cb08b9573384f29134b32fa05d2ab0cf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb08b9573384f29134b32fa05d2ab0cf.exe
Resource
win10v2004-20240226-en
General
-
Target
cb08b9573384f29134b32fa05d2ab0cf
-
Size
475KB
-
MD5
cb08b9573384f29134b32fa05d2ab0cf
-
SHA1
d241201051d83881346702de4170a1a9e3819638
-
SHA256
38560d0461a127cc9164a7699ee19be3ef774ac326b3da65420218573f514b99
-
SHA512
60be9d18ea7ef587e8ddb8e3c41ff9dcd4b0f7e2b501330b10984da37da6f0e47cdd004bab197e256ffcfce9d45dd96e5ae0593f0d5a2d37d1a8afda5ad7bd21
-
SSDEEP
6144:jx2zM4qHacdIiKL0Jow78+HpQ6fIqEEviEI21Muxn3EH5QXMlVOGMLPZU+:jx2zMzmiTowfIq3viEFRnIGXIAHLhH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb08b9573384f29134b32fa05d2ab0cf
Files
-
cb08b9573384f29134b32fa05d2ab0cf.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 186KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE