Behavioral task
behavioral1
Sample
cc57352858b6d8fd7f96f09b2266366f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cc57352858b6d8fd7f96f09b2266366f.exe
Resource
win10v2004-20240226-en
General
-
Target
cc57352858b6d8fd7f96f09b2266366f
-
Size
2.7MB
-
MD5
cc57352858b6d8fd7f96f09b2266366f
-
SHA1
0a79b349603ac21b26bd3110693c2f09c275b373
-
SHA256
7fb2f7eb9929372cb99dfc4f5985fc13180e841e7e5fb78d24022d19ad1b0391
-
SHA512
75645d45bb54de67042e5cc42757e481bed8961274d880ffe59997c7869fbe29596ea3e144b25efac2da8b1c6042a486e535fb9d62546d6715c8ffb9645c2a7c
-
SSDEEP
49152:IK5xySsVPi3ejN0xriaoR+bzhbukwlXPZR9L9cgFbbgTyYMhFUdI5p3sIzpXR9j:I0/emejMiZA5bKxZHL91Fq2NHj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc57352858b6d8fd7f96f09b2266366f
Files
-
cc57352858b6d8fd7f96f09b2266366f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE