Behavioral task
behavioral1
Sample
cbdf77e70c755ec9a8f1afb0d28f5da1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cbdf77e70c755ec9a8f1afb0d28f5da1.exe
Resource
win10v2004-20231215-en
General
-
Target
cbdf77e70c755ec9a8f1afb0d28f5da1
-
Size
10.2MB
-
MD5
cbdf77e70c755ec9a8f1afb0d28f5da1
-
SHA1
d6d6a167984626b73cbd8bad98a49f6107a7ee88
-
SHA256
48bdc13808aa960bb0d0f0cb2b557386797a3f3849b7e9324191a033b879a1c3
-
SHA512
597d27bd1e6040db46c7880fcda0e4b7121f20fc06f8677d4fe291ffdbad8920045b097d44bf3bbd55897719d25758eefc77c7edeaea15f2f10102654a3d87e5
-
SSDEEP
98304:b4PlQNesLTE30g2yOEjjs9/g3tlZq8nzWFhdHMdjiJ30g2yOEjjs9/g3:UdQNesLTFZUju/ouRFhdHMdjvZUju/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbdf77e70c755ec9a8f1afb0d28f5da1
Files
-
cbdf77e70c755ec9a8f1afb0d28f5da1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE