Behavioral task
behavioral1
Sample
cb65ec778abe4cbe676d6b47620f3122.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb65ec778abe4cbe676d6b47620f3122.exe
Resource
win10v2004-20240226-en
General
-
Target
cb65ec778abe4cbe676d6b47620f3122
-
Size
111KB
-
MD5
cb65ec778abe4cbe676d6b47620f3122
-
SHA1
549b86576ee021829b804442da7a193d2d56bd6a
-
SHA256
b765b15a81b9edab65f47dfba495d925a996dab2e240c44f37a60d1ba992a019
-
SHA512
fec4da59c7f8f68a33e1e940ccbd7c1a9a3c2b2017ccbdc1ef48857cc24e1ba0713ced078a47e4a1cc4fdb7839b306b2826a9f5f6c3ee25c311ef322f30e5022
-
SSDEEP
3072:pigOzFt6x7KDbxQma+QFwhSJJKAskhaL:pi1FwVKDbQqSJJKKha
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb65ec778abe4cbe676d6b47620f3122
Files
-
cb65ec778abe4cbe676d6b47620f3122.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bQtg Size: - Virtual size: 380KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bQtg Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yvs Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE