scan
Behavioral task
behavioral1
Sample
cbd976ef2f293f50177249d48b5c5f4e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cbd976ef2f293f50177249d48b5c5f4e.exe
Resource
win10v2004-20231215-en
General
-
Target
cbd976ef2f293f50177249d48b5c5f4e
-
Size
15KB
-
MD5
cbd976ef2f293f50177249d48b5c5f4e
-
SHA1
ffa02fa2610de2ee21458ba663de16fc3d28c5ff
-
SHA256
6ced9807aaae7328a4b2d178a69275fb330799579fa46e9c06ef2fd3ac6e68b4
-
SHA512
26f5e56539fc143f89ecfca75aca0613cd26e80053920e5ae92a4088c8d69b8631f54cc24e58ce8dd6424174665ecce03c31c38e4d559f55af2e2c3164a9ac0a
-
SSDEEP
192:kpL7+15WnobmblAhnwSpUALcSaUzVP42fyWjZBSmi/bOgo/ydhaPE7q0aaNDin0a:kl7WWVJABBx5BSmiDcgh404Mrr0GI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbd976ef2f293f50177249d48b5c5f4e
Files
-
cbd976ef2f293f50177249d48b5c5f4e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE