Behavioral task
behavioral1
Sample
cec4c86cbf547a8962771738d784d07d544a5ad2e7b9d99cf5656fb398494428.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cec4c86cbf547a8962771738d784d07d544a5ad2e7b9d99cf5656fb398494428.exe
Resource
win10v2004-20240508-en
General
-
Target
cec4c86cbf547a8962771738d784d07d544a5ad2e7b9d99cf5656fb398494428
-
Size
25KB
-
MD5
a153e52a052812706f26584b952179bf
-
SHA1
6830ed5ef4f2bf77d851c39f0a16cdfc8c15ed36
-
SHA256
cec4c86cbf547a8962771738d784d07d544a5ad2e7b9d99cf5656fb398494428
-
SHA512
fff971641c33c196dabfed2fc565c303da806d677aa82c3b339f4dc9d28a4685051d3aa1b1d52838b208a5f784a812d6714e356251b14de93352a5f3de95eb5b
-
SSDEEP
384:qBt7Br5xjL2Kd5AsAodte3mte3v+hB0hJA:67Blpf/FA8txt4c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cec4c86cbf547a8962771738d784d07d544a5ad2e7b9d99cf5656fb398494428
Files
-
cec4c86cbf547a8962771738d784d07d544a5ad2e7b9d99cf5656fb398494428.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE