Behavioral task
behavioral1
Sample
cc288fa2228c7d190873b57ec8243d68.exe
Resource
win7-20240221-en
General
-
Target
cc288fa2228c7d190873b57ec8243d68
-
Size
402KB
-
MD5
cc288fa2228c7d190873b57ec8243d68
-
SHA1
061a491b3ccf29625aca075d54491ab641fbed88
-
SHA256
e4b8bc59b29a33a168eaf80ad14e24bf47a66aea31d628ca4e2119d8189831d0
-
SHA512
95a4ed6cdd2f42e110b16830f90e9eeab07f2f2c05208d0fb8f51e6bb9ca0ff35e05b7670d8fd0dc9abdf2457c3a6e5b30b6d8e2b234f9e9d07ab7642f8adc21
-
SSDEEP
6144:6maKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgl:DSmLAuEY71fviagATFmebVQDcYc5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc288fa2228c7d190873b57ec8243d68
Files
-
cc288fa2228c7d190873b57ec8243d68.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE