Behavioral task
behavioral1
Sample
cutestrap.exe
Resource
win11-20240221-en
General
-
Target
cutestrap.exe
-
Size
510KB
-
MD5
10c481180330b05d90fd81e93b2ebc7c
-
SHA1
611ff568f281007c8f5dd6d2c24e4014103d4ff9
-
SHA256
c935e65ffa7bc2d59f6c8110ad13e8a96b83bd4a8df970e14e13c9e899950f32
-
SHA512
040901b10d90faa90d6a5f64c74081400cdaf5b59e8eed9239011a1ad82bae5e44a53c0a141edbd5903e135c9ffd980bf2527b0357e026c3063ab74867fbb7b9
-
SSDEEP
12288:WMvxtw7/GN42UhBWdd0pwcLp2AKxZm627lqcVDtDOykhY:RvXQnB+Wp3pRKxYl7McVD1O+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cutestrap.exe
Files
-
cutestrap.exe.exe windows:5 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 864KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 474KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE