Behavioral task
behavioral1
Sample
cec9215dfd624cd927ee64a44fe89e90N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
cec9215dfd624cd927ee64a44fe89e90N.exe
Resource
win10v2004-20240802-en
General
-
Target
cec9215dfd624cd927ee64a44fe89e90N.exe
-
Size
59KB
-
MD5
cec9215dfd624cd927ee64a44fe89e90
-
SHA1
2ceefe277b4b616ed8fa2a7a592714c19337dd59
-
SHA256
3895e6ad1bc2b6c95a83e14a2ad94ed378a30bef5e3ab7a49418786c71b9997e
-
SHA512
d93e0d6ea8ff7c2abded4183d9cb8d7f703fdc8226437642a7754e23d9b96ba277d11f0bdfffa275a8c9ac0509fe2281f3aad30424129f06127cd7834dc489af
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJBZBZaOAOIB3jM2jMO/7OSSO:V7Zf/FAxTWoJJB7LD2I2IbSSO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cec9215dfd624cd927ee64a44fe89e90N.exe
Files
-
cec9215dfd624cd927ee64a44fe89e90N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE