Behavioral task
behavioral1
Sample
cde226d6bc53213e385ee7adff0cc2ab.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cde226d6bc53213e385ee7adff0cc2ab.exe
Resource
win10v2004-20240226-en
General
-
Target
cde226d6bc53213e385ee7adff0cc2ab
-
Size
6KB
-
MD5
cde226d6bc53213e385ee7adff0cc2ab
-
SHA1
bd32c70296b84436b3d5ce4ed4672222d67a1f64
-
SHA256
dc8eb4ba00b450a01ce1ec834c87fdaf03d8c179a763266baa5547c8bfa9e804
-
SHA512
b89e908c8f4d52d457725b722701ba360548a467491db3881536036440d6f697b3fab0f7e9c5298f25bb8d41370aa74c39f5bbbb139db26eb1d0b50455454d64
-
SSDEEP
96:OIN0sLl9wxuZvp7Kpd8KOcBHQjAlGrsWISpWKX8TzNmLrRPxxWXJUKvQ3FlDQQZD:x022QZdKpCcBH9l0px56J3vGFxQA8w
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cde226d6bc53213e385ee7adff0cc2ab
Files
-
cde226d6bc53213e385ee7adff0cc2ab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE