Behavioral task
behavioral1
Sample
cce8d6304ed28ca4435c365686822a27.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cce8d6304ed28ca4435c365686822a27.exe
Resource
win10v2004-20240226-en
General
-
Target
cce8d6304ed28ca4435c365686822a27
-
Size
5.8MB
-
MD5
cce8d6304ed28ca4435c365686822a27
-
SHA1
09858cc1211da1a3a6ac08b0a4f24eeca58a0f9c
-
SHA256
7e85840c58b6b98c23753789a787991e06dd4632648044fdfdf92b5928a244cd
-
SHA512
feb86aa5a524f5899dee9992ebb35be7ecf796981b4486f987c7cfeee12d8a3eba508cb828f1dd27766bb68047faf1e7221b2eeca49d9602ad16ba5189fa2b59
-
SSDEEP
98304:izI7dK4fZmFQKr0wVQgg3gnl/IVUs1jePsezNn834fRQmWgg3gnl/IVUs1jePs:izIBKwZmFQKrVV0gl/iBiP1zeoZrSgll
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cce8d6304ed28ca4435c365686822a27
Files
-
cce8d6304ed28ca4435c365686822a27.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE