Behavioral task
behavioral1
Sample
cf87443ca9e84c98c2aa2d6b3f2fbb90N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cf87443ca9e84c98c2aa2d6b3f2fbb90N.exe
Resource
win10v2004-20240802-en
General
-
Target
cf87443ca9e84c98c2aa2d6b3f2fbb90N.exe
-
Size
59KB
-
MD5
cf87443ca9e84c98c2aa2d6b3f2fbb90
-
SHA1
f2c8e59855f64575c80b21e692d6801d7f274ebe
-
SHA256
ea1947b1260adb295526e65398434e58c86bd4892b0638572ae046c71ecf6a6c
-
SHA512
7a98044be157b7c4161a249e0ae562b568b642356b87c4c0eafbdcdc662ece3ffd62e810c6065d13c11c6e5b3292e6e75277a7099b6a02cf02ae8eca9948e227
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9nHJ2xjr:V7Zf/FAxTWoJJ7T6d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf87443ca9e84c98c2aa2d6b3f2fbb90N.exe
Files
-
cf87443ca9e84c98c2aa2d6b3f2fbb90N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE