Behavioral task
behavioral1
Sample
cb9e027b69d3def5ea44760ecb65a890N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cb9e027b69d3def5ea44760ecb65a890N.exe
Resource
win10v2004-20240709-en
General
-
Target
cb9e027b69d3def5ea44760ecb65a890N.exe
-
Size
402KB
-
MD5
cb9e027b69d3def5ea44760ecb65a890
-
SHA1
41c9f0463431f91bd58411127750b5b3a95cc8d3
-
SHA256
1a7c075fc7cdea12afba5d7c1213112b481e2f1da3eba6e27d074eabf30f4b57
-
SHA512
5c0c7cef370dc52a5a0ba5c4a85fd977d940dd43fec72af4d43f8a60a58450dca47ab1d67d3eda4805eef033a88bb3a25559ba6dfd1734af3b204edf0b561c42
-
SSDEEP
6144:SEcvV4Fustn8KnUI8/wkkexkEphMOjve/awxX7Q:SBV4Fust04kk3EphMmvei6Xs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb9e027b69d3def5ea44760ecb65a890N.exe
Files
-
cb9e027b69d3def5ea44760ecb65a890N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE