Behavioral task
behavioral1
Sample
NAKED_CONE_GIRL.exe
Resource
win7-20240611-en
General
-
Target
NAKED_CONE_GIRL.exe
-
Size
923KB
-
MD5
41b70ba750884b07eadc373892a146bf
-
SHA1
adbb9e334b574f17174776c94ecbbd1f5bcff2ea
-
SHA256
621bf0b39bb1e0c4032db7aa75511b4726760229c6cf5fbdfacfa2cbbbcebc66
-
SHA512
548d78c789518e85661e10e45f66e51e4d755476f2fc297748e9c0e998f1f9c40f3be7806886adfcc668b5cb4da7e82a9dcbb84eb554a9f8f73af64ad46214a7
-
SSDEEP
24576:B7bDM+quh6ZcnjAH/NucLHYzQmTHaz5TYz3Fc:BHY+Xh6+jAfNuJzpzETQ36
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NAKED_CONE_GIRL.exe
Files
-
NAKED_CONE_GIRL.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 906KB - Virtual size: 908KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE