Behavioral task
behavioral1
Sample
cdfd476b743643ae8d4160a021cb75ce.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cdfd476b743643ae8d4160a021cb75ce.exe
Resource
win10v2004-20240226-en
General
-
Target
cdfd476b743643ae8d4160a021cb75ce
-
Size
1003KB
-
MD5
cdfd476b743643ae8d4160a021cb75ce
-
SHA1
91d8f158f1cab1d3ba35341b5535496ed86d96de
-
SHA256
a07e03f065e0614096b1eefcaca6848a5fdf43eec99369b11a12aae1a3ae48f0
-
SHA512
93e17425750da537dab1bb2046a505c7688815c1d92fe4601feda3795b1eb68cd75c60ee4e6ee4b47346a5237fbaf4db30a6dac0ef0bfc577ea53e09e1329093
-
SSDEEP
24576:9YZMutmjQkqO9wLaUnG5yaYfWGv1wDU2UTQVAU:aZHYQkafnG5yag+DXUTQVAU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdfd476b743643ae8d4160a021cb75ce
Files
-
cdfd476b743643ae8d4160a021cb75ce.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE