Behavioral task
behavioral1
Sample
cbf5e7d424c914914d55466fdb4243fe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cbf5e7d424c914914d55466fdb4243fe.exe
Resource
win10v2004-20240226-en
General
-
Target
cbf5e7d424c914914d55466fdb4243fe
-
Size
2.7MB
-
MD5
cbf5e7d424c914914d55466fdb4243fe
-
SHA1
4502a7e4385da69d2b4482e7dcd67210c377709b
-
SHA256
925e10afe91edaf3e4cef758079d1342dcb1a67a3ed36f375b2db19f7e696980
-
SHA512
543ae11f3466c8f00b488c03e0353fb38d9b213219b3b796f5d6f29cf551cf0bc62c4d3502b50da78b3bdf829d47e7b2cbdd970598ad3476553308d35da6ee0c
-
SSDEEP
49152:jNm5jdoSgmNUrXO1EubM6/D3WSDyt++Jfw653:jYnore6gM6/D3pDyt1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbf5e7d424c914914d55466fdb4243fe
Files
-
cbf5e7d424c914914d55466fdb4243fe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE