Behavioral task
behavioral1
Sample
0cdcd4d8ba1af02d31d45e33cd991121d43fe5462103332297f4a707f3487f67.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0cdcd4d8ba1af02d31d45e33cd991121d43fe5462103332297f4a707f3487f67.exe
Resource
win10v2004-20240704-en
General
-
Target
0cdcd4d8ba1af02d31d45e33cd991121d43fe5462103332297f4a707f3487f67.exe
-
Size
1.7MB
-
MD5
7be26334af89e399dd483f0cbe249200
-
SHA1
c5aa5b80f6024fd1e87a3026d5cda4127732255c
-
SHA256
0cdcd4d8ba1af02d31d45e33cd991121d43fe5462103332297f4a707f3487f67
-
SHA512
feee977fa22ae49fbf67923b6afea2a71da8a987615dc5935bd4e5cc7044eeaa5d3435c5228891b7cc1691b3fc0ae0b1b961d71c1ef367ee92a6654bfbd7881e
-
SSDEEP
12288:DZISeMFVhdL1XBvXxzGNABnwHdxkn7L1GzR1FYoxkM2N4JHUcTwoSE:VIW0rXi1GzRQo08F
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cdcd4d8ba1af02d31d45e33cd991121d43fe5462103332297f4a707f3487f67.exe
Files
-
0cdcd4d8ba1af02d31d45e33cd991121d43fe5462103332297f4a707f3487f67.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 289KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE