Behavioral task
behavioral1
Sample
ccfcf87feeddec8308f2a7d21aecc250N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ccfcf87feeddec8308f2a7d21aecc250N.exe
Resource
win10v2004-20240802-en
General
-
Target
ccfcf87feeddec8308f2a7d21aecc250N
-
Size
91KB
-
MD5
ccfcf87feeddec8308f2a7d21aecc250
-
SHA1
19a6bf3c53c2ec4f0664b2a675313290b2e83f32
-
SHA256
57bf98785249fe473e15b2080237a4e34981b407f6a14e7e0caaa7fcb8b4166c
-
SHA512
1ba94e61c665e14c7c923578a8e091af2894d421f1bb571a089386d7f1d637391604e81f4570839a3dcb52509432a05c271b4b20d2035ab8b080fc4df2389f6d
-
SSDEEP
1536:XJRtlEnBHHIgabuYotV/JbJCX5SBijJRtlEnBHHIgabuYotV/JbJCX5SBiE:XvtYxOuYotvYQIjvtYxOuYotvYQIE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ccfcf87feeddec8308f2a7d21aecc250N unpack001/out.upx
Files
-
ccfcf87feeddec8308f2a7d21aecc250N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ