Behavioral task
behavioral1
Sample
cb2151e241ea5887598b5e11d52a9743.exe
Resource
win7-20240221-en
General
-
Target
cb2151e241ea5887598b5e11d52a9743
-
Size
784KB
-
MD5
cb2151e241ea5887598b5e11d52a9743
-
SHA1
5c95f510955325d9211f8f294fe57fbbd5b6e8d8
-
SHA256
75a89a94ab6a4a7ee5c7f1d305e5e215e945d4e6ba59c677f0e8880de4fe91f4
-
SHA512
24146b32816c4c7bc91cde554b4616a96a3d1c7e601fa674b2e053bb085788d6775a88fe48a6ff7b5726f786ce2399fb2ad22d27b5fe3f46959d1912d0f2148d
-
SSDEEP
12288:jNnHv8v+TZ5Q5G8KNj93lGqqkFVBXBN1EpaK0YA1pIcC7G79pRdBv6kO8lyHnIre:lvrTjQVKfXqkFVtz16Nb7G7fF1OWkhx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb2151e241ea5887598b5e11d52a9743
Files
-
cb2151e241ea5887598b5e11d52a9743.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE