Behavioral task
behavioral1
Sample
cb2ef94967b1446261d95f70724ff408.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb2ef94967b1446261d95f70724ff408.exe
Resource
win10v2004-20240226-en
General
-
Target
cb2ef94967b1446261d95f70724ff408
-
Size
6.0MB
-
MD5
cb2ef94967b1446261d95f70724ff408
-
SHA1
0ad5878c81585255dc4678867862f71066619869
-
SHA256
8a742e6b8eea1806045da666249784f099087996146cc4e46bb96f4e906dcbcf
-
SHA512
3c6814a49ec4218764844f12743f7b0ad4bce6682e7a090c12137a4d3a08e7dc05c9dede3baf89c8b983f0a92ebff9e9cce6efad8108a908f3d34aaf5ffbefe0
-
SSDEEP
98304:BHS1i1iyB/cakOWZDtQXWry7mBZbkcaksDjGDHRQlywbcakOWZDtQXWry7mBZbk/:Bmv2/diaWry7mbYdfPlbdiaWry7mbYdl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb2ef94967b1446261d95f70724ff408
Files
-
cb2ef94967b1446261d95f70724ff408.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE