Behavioral task
behavioral1
Sample
ced12ac2a44bad4804911b5c333d742057f0e6cdb67f11894f9802e7444d4c61.exe
Resource
win7-20240903-en
General
-
Target
ced12ac2a44bad4804911b5c333d742057f0e6cdb67f11894f9802e7444d4c61
-
Size
838KB
-
MD5
17796727ae44c47b54acedac4234fa32
-
SHA1
171e3afcd1dd68c562fddedbb30e76d9a6b47f6a
-
SHA256
ced12ac2a44bad4804911b5c333d742057f0e6cdb67f11894f9802e7444d4c61
-
SHA512
f9ba2d2e2e566061b13d959b719d4b3e66b9dbab552bca8518a6f612f8436d506397f50a2fff92117a4442cef10a2e466600c07b092d2b0eddaa85c971c65b31
-
SSDEEP
12288:KiRi4f4iCnhfnDoCiO/PXyqwF2LYTf/bWdBmrxwfDj7r9a3JI8PRoSW50Tn:KiRL4//6xcLYT3bWdBmVkDj7rL8Pb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ced12ac2a44bad4804911b5c333d742057f0e6cdb67f11894f9802e7444d4c61
Files
-
ced12ac2a44bad4804911b5c333d742057f0e6cdb67f11894f9802e7444d4c61.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 715KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE