Behavioral task
behavioral1
Sample
cc4b6899d0e15bd8ee23efba3fbd797a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cc4b6899d0e15bd8ee23efba3fbd797a.exe
Resource
win10v2004-20240226-en
General
-
Target
cc4b6899d0e15bd8ee23efba3fbd797a
-
Size
533KB
-
MD5
cc4b6899d0e15bd8ee23efba3fbd797a
-
SHA1
3b56f11e4fcd8c734c6cf7dd3308e5524559d57c
-
SHA256
6663c1b0dc8e1b7196de41b29df297e96e89e4e10f94bbb98abeab68ac7599cd
-
SHA512
3e4771793d67f348ca67e37370d14cd0871a58168822161fcbdb1e07989945596c5884b4dba0da30efb54bbc693826ca77aebfc91cee6f69a3759beb367f2caa
-
SSDEEP
6144:4ur7MB1NP+TrGEETohT7Lux/i9oHONm2KUZ2siAaKE0ngB+2KvxIhNbO:4uaNP+Tr7EToF7Lux/Y0UYshawnaLho
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc4b6899d0e15bd8ee23efba3fbd797a
Files
-
cc4b6899d0e15bd8ee23efba3fbd797a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE