Behavioral task
behavioral1
Sample
ccaebfd63ffd6fc2d2ec8dcc0aa5465db65ddb7ecb76ae854a5adda24431f9bf.exe
Resource
win7-20240729-en
General
-
Target
ccaebfd63ffd6fc2d2ec8dcc0aa5465db65ddb7ecb76ae854a5adda24431f9bf
-
Size
215KB
-
MD5
14953f67d86ff70b935d3fadef883e1e
-
SHA1
716c6b589e7e1dd12e9cf5999f26818c2defe4eb
-
SHA256
ccaebfd63ffd6fc2d2ec8dcc0aa5465db65ddb7ecb76ae854a5adda24431f9bf
-
SHA512
17023cbaf064ffbf3c2bbbf92bd8aea665a290a2843dd0120bbecee65b866e188a5a90f468a658ff0eeebb15a769477c7c94ba0b6a92d7cea1fdacc32ca61d6d
-
SSDEEP
3072:enaypQSo6VEio5Ua4NjlHSXIBlf08qySzCeRS25:wHpQSo2Eio5UXiRd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccaebfd63ffd6fc2d2ec8dcc0aa5465db65ddb7ecb76ae854a5adda24431f9bf
Files
-
ccaebfd63ffd6fc2d2ec8dcc0aa5465db65ddb7ecb76ae854a5adda24431f9bf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE