Behavioral task
behavioral1
Sample
cda1b7a9ee8027a5f35cb83e7ac43ce1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cda1b7a9ee8027a5f35cb83e7ac43ce1.exe
Resource
win10v2004-20240226-en
General
-
Target
cda1b7a9ee8027a5f35cb83e7ac43ce1
-
Size
133KB
-
MD5
cda1b7a9ee8027a5f35cb83e7ac43ce1
-
SHA1
4e6c4d2c6090328d8d50d8fc3f343aeb4c94aa40
-
SHA256
2c818093c4bff82a1091d6344e1569ed3b01ee6121a1eb8b3b902a52e955e5a3
-
SHA512
1476b6e79c13437007e04ac2f767532bfda670f1c7145bcd2f637fa2b028401f823b1634420cf4d6566755d9948c73ba3db3df592c56eac211dc0b64b29ef5a8
-
SSDEEP
3072:/PmWTkkaFhlX0bdsDAXP2kEjBsnd8/6nyQNQ:/TVgDX4WDAX986nVNQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cda1b7a9ee8027a5f35cb83e7ac43ce1
Files
-
cda1b7a9ee8027a5f35cb83e7ac43ce1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE