Behavioral task
behavioral1
Sample
cf66bb9959ef43775d822c577fa5b5e0N.exe
Resource
win7-20240903-en
General
-
Target
cf66bb9959ef43775d822c577fa5b5e0N
-
Size
178KB
-
MD5
cf66bb9959ef43775d822c577fa5b5e0
-
SHA1
2b22182a2bafbbf89e413443d83881ef26f37c4b
-
SHA256
1e71efcd42f9b55bd79f063ce435045c87e158f3524d8f5b29559a083d339d27
-
SHA512
c19d440a30269e35f912d6d0ccb83e71b61f7be1e01c721d7073fa38b3b94f4a58df6f70000aff8abf88fa9d8075fc10fe3257735a2025bbbe27112d47339635
-
SSDEEP
3072:c3VD85gJFV8QncMujKCv0jqAi0hIazLEHYxWVfhn+zM45uUyvHBsV2svkgfODQ2C:6l2FGCqBi0hx4YQVfhn+35zksV2svQMR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf66bb9959ef43775d822c577fa5b5e0N
Files
-
cf66bb9959ef43775d822c577fa5b5e0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 560KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE