Behavioral task
behavioral1
Sample
cf26aaac3125c50497ed856f54d0002e42111c35aaa0cd42d382e0f917cdd040.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cf26aaac3125c50497ed856f54d0002e42111c35aaa0cd42d382e0f917cdd040.exe
Resource
win10v2004-20240704-en
General
-
Target
cf26aaac3125c50497ed856f54d0002e42111c35aaa0cd42d382e0f917cdd040
-
Size
41KB
-
MD5
b58e8ad1ac6aa0b81015e64091fa2d76
-
SHA1
45063b4f8d3f3c0406a97cf63c918347bde2dadb
-
SHA256
cf26aaac3125c50497ed856f54d0002e42111c35aaa0cd42d382e0f917cdd040
-
SHA512
80ad8df0ab52e4feca1cddf0bdf33f73cf629c8904cc2fff8ea2fa268e6dfb62c6ed226602e5b70fbe1ac9e6062642e9fab6044260ff9888ffbd9434c5e5d860
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJjtf8WUtf8WGoj9COieQJfoj9COieQJT:V7Zf/FAxTWoJJ2WjWpf1fY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf26aaac3125c50497ed856f54d0002e42111c35aaa0cd42d382e0f917cdd040
Files
-
cf26aaac3125c50497ed856f54d0002e42111c35aaa0cd42d382e0f917cdd040.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE