Behavioral task
behavioral1
Sample
ccd7bcac0612f1930b5e051e5b8e1ff0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ccd7bcac0612f1930b5e051e5b8e1ff0.exe
Resource
win10v2004-20240226-en
General
-
Target
ccd7bcac0612f1930b5e051e5b8e1ff0
-
Size
223KB
-
MD5
ccd7bcac0612f1930b5e051e5b8e1ff0
-
SHA1
2cbe61c99e49cc1a493d9afe1059eb2c0b3e6d66
-
SHA256
986d2626d1a3db4520facaeea06c7bfa0c8740fbb18fcc4e06309aad0a234389
-
SHA512
baaa8c464b8d50e6ec29d7fbb20814ca4583f4d7f100467f1be85c5b21d1a693a7077d5cdf8bf1ced8ace9f719102e0230d09776dcc5b6ed09af2d06e9d0babb
-
SSDEEP
3072:z0pMYxEUwRf293jTL6wcAlIf1mTDmNF6qrtIRVfBnyErz06xWKm4dk:z0pFzKf293tuf1mfmr6C6rBhrgYlfdk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccd7bcac0612f1930b5e051e5b8e1ff0
Files
-
ccd7bcac0612f1930b5e051e5b8e1ff0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 132KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ