Behavioral task
behavioral1
Sample
cda4821ff5084d659c0523538a2ddbc3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cda4821ff5084d659c0523538a2ddbc3.exe
Resource
win10v2004-20240226-en
General
-
Target
cda4821ff5084d659c0523538a2ddbc3
-
Size
35KB
-
MD5
cda4821ff5084d659c0523538a2ddbc3
-
SHA1
03ac1df9f80fa87c3e5c0a4348beb25013cd2686
-
SHA256
6b30bfed23f0046c7acb042aa0df72716b50839b0f263d1eb8036a9297eee797
-
SHA512
7c2acdfabcf3662d2aa944083d68b283ee1eca1bb9b3de379d37edf95af8caf87ca1a37846827999fc24551f79342752318ade12f6a6782a9730dfffebf41b6c
-
SSDEEP
768:8iGeXhTTO83VwEtMQ/XmfbB9p0ourMhw1O/k87CdCEoQjYtZfzat1fO:80Xh/O8VVlgbBE5rEk87iq5fzE1G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cda4821ff5084d659c0523538a2ddbc3
Files
-
cda4821ff5084d659c0523538a2ddbc3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE