Behavioral task
behavioral1
Sample
cddaa6a6cbe285119673cef50f24cb65.exe
Resource
win7-20240221-en
General
-
Target
cddaa6a6cbe285119673cef50f24cb65
-
Size
784KB
-
MD5
cddaa6a6cbe285119673cef50f24cb65
-
SHA1
b6d37bb8f442663f21755a5265b138695f953d0c
-
SHA256
b0ede24fe77b8ab54d379af1f9461f2c4b6d6de4f8662bbde1f2e828a87b3d63
-
SHA512
0b9d9c1c7b434eb09198d992d852021dcd51ed3e030df1680e430e7e290174ff7ac87b2b2ab14861ee29acc73f7086f3144f85ed339a3a72eaaa7caad41adba0
-
SSDEEP
24576:/g3rpfwhEgS2TXr3V0XzUOmq9sIXgk3NsGUbA4GPaq05/:/gbpIs+XTVeoOmmnXKFzWxO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cddaa6a6cbe285119673cef50f24cb65
Files
-
cddaa6a6cbe285119673cef50f24cb65.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE