Behavioral task
behavioral1
Sample
cdab9e29b712540ff5a84febd1f6dc0148aa8ebffe57469024c04087844f6b6eN.exe
Resource
win7-20240903-en
General
-
Target
cdab9e29b712540ff5a84febd1f6dc0148aa8ebffe57469024c04087844f6b6eN
-
Size
183KB
-
MD5
1f61c31caa36f9d3f8ef07800ee8b9f0
-
SHA1
be84761c426043724302140b552d690d2afa5f44
-
SHA256
cdab9e29b712540ff5a84febd1f6dc0148aa8ebffe57469024c04087844f6b6e
-
SHA512
7d91e51c4f8e86b1e1c1e8671ce3d1d4dbe67aa098b9c29761d933e82f5c8bae7a7609598eb27f9d723a1a88b4338337fca18fa94c4bb42c2a5b2b1f876f353e
-
SSDEEP
1536:a7ZyqaFAxTWbJJ7TyGsGJKSHOxRfKn4JpY9p0b4vtQELEk8NhoYyRvaLNFqRprAN:enay2XKh3Cng41aUFXwj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdab9e29b712540ff5a84febd1f6dc0148aa8ebffe57469024c04087844f6b6eN
Files
-
cdab9e29b712540ff5a84febd1f6dc0148aa8ebffe57469024c04087844f6b6eN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE