Behavioral task
behavioral1
Sample
ccd9460391de7a22709421caacb0cda7.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ccd9460391de7a22709421caacb0cda7.exe
Resource
win10v2004-20231215-en
General
-
Target
ccd9460391de7a22709421caacb0cda7
-
Size
25KB
-
MD5
ccd9460391de7a22709421caacb0cda7
-
SHA1
f6583df917a5abd39377df8cae6a5fcb6b8f338c
-
SHA256
1e964683d777ac282fcdbb8ae99e821040e611ce26b6de808219bed82e15aed3
-
SHA512
4cdffeb789c73335cc0fde5b8d4a658d803c06182f5bdc3016be23e780106101432fdd24b9e75b42b0296cd56acb9fe49ec338caa52cdaa8284818aca99a61a6
-
SSDEEP
384:lYmuSX1cxy3btPaCYjT1UcxwyB/HL3Z+YSlKnwfUpnw1Xz3Lc0S7lRzIHBwYP0V:7AmbLYjT1nwY4Sznw1Xz3XS7nzXYY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ccd9460391de7a22709421caacb0cda7 unpack001/out.upx
Files
-
ccd9460391de7a22709421caacb0cda7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 570B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ