Behavioral task
behavioral1
Sample
cfed30e33ca6994b17ec42fc2f605750N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cfed30e33ca6994b17ec42fc2f605750N.exe
Resource
win10v2004-20240802-en
General
-
Target
cfed30e33ca6994b17ec42fc2f605750N.exe
-
Size
139KB
-
MD5
cfed30e33ca6994b17ec42fc2f605750
-
SHA1
0ba0a72ff1444f4ed288d3bd2edb0ed3a0dd83bf
-
SHA256
451f5f8814e634e748f49678e221b7c7cdc0b539e4613a547ff0dee4375f0895
-
SHA512
e302b804a06fa816ae9115b7ef93214451a2b12d9a48468c12c849ac6b7d6d9fd28c3b59c504fbd3ae10f8df8b8e7e00ce2bbd7c66704f8e27bea1fa566fad68
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5eTWn1++PJHJXA/OsIZfzc3/Q8zxo:fnyiQSox5+QSox5d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfed30e33ca6994b17ec42fc2f605750N.exe
Files
-
cfed30e33ca6994b17ec42fc2f605750N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE