Behavioral task
behavioral1
Sample
cd8eccd79e59d1d1a4eecc1bb2ff47d0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cd8eccd79e59d1d1a4eecc1bb2ff47d0N.exe
Resource
win10v2004-20240802-en
General
-
Target
cd8eccd79e59d1d1a4eecc1bb2ff47d0N.exe
-
Size
474KB
-
MD5
cd8eccd79e59d1d1a4eecc1bb2ff47d0
-
SHA1
aaf19d74e21cb9f168f484d05bc5647f1214ed94
-
SHA256
c61ead37371b3398fbd6bbdb4a78a5e10b6194204b29f81cc3f92a271f5d70e4
-
SHA512
f83a26f903517cb0d55a3d72721a6d1e06b3e9031a731199edd69b364cf6c8e29eb08f2c23e9e3a2980281a33b2235eb71c0f3073e290384d056de869f0eda51
-
SSDEEP
12288:y7HQhWI2TmvDtUiGpc/MeFXmC6+RVA7l03cPKaW6:QHQhWI2TmvDtUi0c/MeFXd6+RVY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd8eccd79e59d1d1a4eecc1bb2ff47d0N.exe
Files
-
cd8eccd79e59d1d1a4eecc1bb2ff47d0N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE