Behavioral task
behavioral1
Sample
cb909550c817556eec90495567122923.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cb909550c817556eec90495567122923.exe
Resource
win10v2004-20240226-en
General
-
Target
cb909550c817556eec90495567122923
-
Size
19KB
-
MD5
cb909550c817556eec90495567122923
-
SHA1
b5b4d0b57dd0cad0d53f971c302b668165f4642e
-
SHA256
561cddc921d27f1def8e6a194de239561b33ab87cbbc1be74f7444202be143da
-
SHA512
783b98bbd87b615fc4bd92508ed7a8668db0b87a25113b6f1d22f5f35e61eb74927d680a7c2faa19c2820817677671c8bf1a13604509cd1145187839bde3cdbf
-
SSDEEP
384:IlV29cRZXlbiLkFPNu+JtPC9djt8iXxkrp2RiPHvx6aNJawcudoD7U1:Ie9cbljF1uhHj6Qxkrp2RiBnbcuyD7U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb909550c817556eec90495567122923
Files
-
cb909550c817556eec90495567122923.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE