Behavioral task
behavioral1
Sample
cd9031df0781d9c943a30385c7a48742.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
cd9031df0781d9c943a30385c7a48742.exe
Resource
win10v2004-20240226-en
General
-
Target
cd9031df0781d9c943a30385c7a48742
-
Size
133KB
-
MD5
cd9031df0781d9c943a30385c7a48742
-
SHA1
d20766349765a9b75442ecb46ceebe1957b13692
-
SHA256
6ca04489099f39589d67ee94f7ebb5c2ab789258f0d0c1e9f020d79268d67ba2
-
SHA512
8dc6eb6e1454f47f9a4a642e2a228a2dda7e13d09ac3241e89df2dbdf81842d0a60da67e9dec7a9f9c09f0b2aaa4f9ed41d810cab49e39043efddec707405ee2
-
SSDEEP
3072:28SwymfXiqKRqgb41nmC5l0FDM5EPGboSq4KQul0bPYwhO7UbvT8Q:28S+fXiXq1lmCX0dM5dbnq47k00wdoQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd9031df0781d9c943a30385c7a48742
Files
-
cd9031df0781d9c943a30385c7a48742.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE