Behavioral task
behavioral1
Sample
cb2227938d5d93cdc9c7c87f726f38af.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb2227938d5d93cdc9c7c87f726f38af.exe
Resource
win10v2004-20240226-en
General
-
Target
cb2227938d5d93cdc9c7c87f726f38af
-
Size
5.3MB
-
MD5
cb2227938d5d93cdc9c7c87f726f38af
-
SHA1
6dcc0db7b40b567d911441e45964127ae366b921
-
SHA256
923a06601c36c2b88dacdd5291555d12499b50c6ff68a7e991240c6151192d4e
-
SHA512
27c4063fad29cc05b5b6bf9031b81063665e36b45a2b25094f86959bd731d769eb84f838209abb5039f34d341bb841a937736626747bf692e10e03e4522ddcd5
-
SSDEEP
98304:Z+VcXhXBLLyGlj+A4hkVXqY1tBYWhzV+X5R0IBeI4hkVXqY1t:gWL+K+bktqSbQvrcjktqS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb2227938d5d93cdc9c7c87f726f38af
Files
-
cb2227938d5d93cdc9c7c87f726f38af.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE