Behavioral task
behavioral1
Sample
ccfd66cbba356a23279ad5ce234c335015707b95b24fb6ff3c44908ada2b18b5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ccfd66cbba356a23279ad5ce234c335015707b95b24fb6ff3c44908ada2b18b5.exe
Resource
win10v2004-20240508-en
General
-
Target
ccfd66cbba356a23279ad5ce234c335015707b95b24fb6ff3c44908ada2b18b5
-
Size
42KB
-
MD5
9c538bd6c9a90d282b83f5836df2e4fa
-
SHA1
9a5fc66eadcf8f37f354a58c250a011240b04630
-
SHA256
ccfd66cbba356a23279ad5ce234c335015707b95b24fb6ff3c44908ada2b18b5
-
SHA512
a877632bfb774cbde331a76db9e048e6d3bb3cc8766f77b15466a1102a13175e899bca4544b7d9a04578b0a0e2600c00db84304419ec048c24415e0657510ede
-
SSDEEP
768:PpO4Xb2E6NOSjkU6Lv5ABhGUVTnbcuyD7UN:hOqbZ6NjkbSGgnouy8
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccfd66cbba356a23279ad5ce234c335015707b95b24fb6ff3c44908ada2b18b5
Files
-
ccfd66cbba356a23279ad5ce234c335015707b95b24fb6ff3c44908ada2b18b5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE