Behavioral task
behavioral1
Sample
cd1eeb8935161dd8418e344bc1e1de0ea10c84605a5dbbc72900b56a8ddb937f.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cd1eeb8935161dd8418e344bc1e1de0ea10c84605a5dbbc72900b56a8ddb937f.exe
Resource
win10v2004-20240704-en
General
-
Target
cd1eeb8935161dd8418e344bc1e1de0ea10c84605a5dbbc72900b56a8ddb937f
-
Size
786KB
-
MD5
a94a191acc6da90ad016261f00fe2342
-
SHA1
42a849b694140a619c527eeee4346281ec5273b2
-
SHA256
cd1eeb8935161dd8418e344bc1e1de0ea10c84605a5dbbc72900b56a8ddb937f
-
SHA512
0dbe071c687b8d974eef0daccf97e3b79bf5f0d3dc05bf0df477858eec0f0c944e5fb2d893e1abb730f6c1f013fef782053685075fea6220f35de2ea2638156d
-
SSDEEP
12288:RGCq5mWm6F2KatSSuDTBYKgUaDVJj/9Si4KdEncueifML5PntWWSvvIH:WpbnSwTZgrDVJr93PueeMLzYvv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd1eeb8935161dd8418e344bc1e1de0ea10c84605a5dbbc72900b56a8ddb937f
Files
-
cd1eeb8935161dd8418e344bc1e1de0ea10c84605a5dbbc72900b56a8ddb937f.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 752KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE