Behavioral task
behavioral1
Sample
ccea78e599784ec28d717e288acd6890N.exe
Resource
win7-20240705-en
General
-
Target
ccea78e599784ec28d717e288acd6890N.exe
-
Size
96KB
-
MD5
ccea78e599784ec28d717e288acd6890
-
SHA1
333d826d6f4edbeaf2cc7fec2495c3b2fdd1620f
-
SHA256
4f84b4ebaacfe0ca42afa3f34fa27c6bc4247962d6e2ca020a1d21168ff3efc0
-
SHA512
160052ff4b1d080c5e15a37834022782045b23983b21fb38177f0a3898159b6b073520ab803df8d6f310a8f4c8c5dcda7ff3dc629666e42951f08213ca32cec1
-
SSDEEP
3072:vhOmTsF93UYfwC6GIoutC5Y5mqZRdu5XYejxRJ2:vcm4FmowdHoSC5Y55RdudYo2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccea78e599784ec28d717e288acd6890N.exe
Files
-
ccea78e599784ec28d717e288acd6890N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE