Behavioral task
behavioral1
Sample
cdb56477418d1a2f5bf09c7c747cffec.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cdb56477418d1a2f5bf09c7c747cffec.exe
Resource
win10v2004-20240226-en
General
-
Target
cdb56477418d1a2f5bf09c7c747cffec
-
Size
5.1MB
-
MD5
cdb56477418d1a2f5bf09c7c747cffec
-
SHA1
b4964e4bda1954faabe2dc11c2e26ac0724c0742
-
SHA256
1ac5f0aaffb00d8dfdc9a76c954340ded86ba93a669c15cb5c2711f0be38e0f4
-
SHA512
67a71b832cd9002a364b76a3b10b5c761a4d7e79554396748366fbf5640eb8762569c759dee6de10ef53b4d588678b61ec46570a96a0ae48eb88445850a837d8
-
SSDEEP
49152:6SAiU0yGSvtl0zn7UAqi6PIhwRlUTbyLay35bkrfg8FYri+ts5EjdZwaA9jCIFkr:6pxCzn7ZnhwRll30g2yOEjjs9/g3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdb56477418d1a2f5bf09c7c747cffec
Files
-
cdb56477418d1a2f5bf09c7c747cffec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE