Behavioral task
behavioral1
Sample
cd8b6b7f53d8b8c9247860b0cad6d244.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cd8b6b7f53d8b8c9247860b0cad6d244.exe
Resource
win10v2004-20240226-en
General
-
Target
cd8b6b7f53d8b8c9247860b0cad6d244
-
Size
1.6MB
-
MD5
cd8b6b7f53d8b8c9247860b0cad6d244
-
SHA1
45675a59b111a90bc798b7c5b3f8f35c12db606d
-
SHA256
5b611f5f023c3e58cb423d27b25a8dc2f47eb98ce61c0750ac785da122e6d319
-
SHA512
4eef13284a4be56910394cd142b95da361449d89e279215b6a8850587520e586548a3672f445dfc1a0bf93c167a53bd85e081a628bda90f593dcf609f77f327f
-
SSDEEP
49152:f7Ead91KN8ICicakLz00SB1ClQZmngAacakLz0O:fbkN8ICicakc0i1ClQZmngAacakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd8b6b7f53d8b8c9247860b0cad6d244
Files
-
cd8b6b7f53d8b8c9247860b0cad6d244.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE