Behavioral task
behavioral1
Sample
cd79ab4f89c41623dddd1bf3b5b348bf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd79ab4f89c41623dddd1bf3b5b348bf.exe
Resource
win10v2004-20240226-en
General
-
Target
cd79ab4f89c41623dddd1bf3b5b348bf
-
Size
1.8MB
-
MD5
cd79ab4f89c41623dddd1bf3b5b348bf
-
SHA1
b81b96fefb9c8f4639ecd1febbb63bebf1585876
-
SHA256
4354f5ab14b70792e5618a41bd322505839d7dcc43649110bb2c14d2da156e43
-
SHA512
481cae6910d46031f91b12a4d8f288cfb9828dd703e2bb2c76776f613cd79cd42d0bd9a59e5db3899c7dacf258b2eeffc3372927e62968a16131738514c71d6d
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHs:SCqm2Jpr0nNM7Dus7Nx2M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd79ab4f89c41623dddd1bf3b5b348bf
Files
-
cd79ab4f89c41623dddd1bf3b5b348bf.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE