Behavioral task
behavioral1
Sample
cdacdb1d76eefdbf9433726c9142afd8.exe
Resource
win7-20240221-en
General
-
Target
cdacdb1d76eefdbf9433726c9142afd8
-
Size
784KB
-
MD5
cdacdb1d76eefdbf9433726c9142afd8
-
SHA1
f292f49ec5da39e792cff08d93fe3ea93c7a8be3
-
SHA256
8f69e305bb888db195c80ea295031d15f8bca179c527ae35d01bc2f89cbc7578
-
SHA512
0839de8ecb39ca4db2f944d83128c322cc8d5cadaf67c324409422f6e551a915753b3f93f2d21513972733ec68eb6ff1e4799971d40e798fc52a3962127a0e87
-
SSDEEP
12288:Nk9DSZudQv/IYLYgstS43dlWaKXPNdL5aTGhU6tbdT0MBKZoCYROzw4:NeQPYdtS4TWaKfNF5KsU6XwMyYg1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdacdb1d76eefdbf9433726c9142afd8
Files
-
cdacdb1d76eefdbf9433726c9142afd8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE