Behavioral task
behavioral1
Sample
cf74e11e1bcf5d31c140e3b90268a23387366e30b072e92f46f511ca4c61d7ac.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf74e11e1bcf5d31c140e3b90268a23387366e30b072e92f46f511ca4c61d7ac.exe
Resource
win10v2004-20240802-en
General
-
Target
cf74e11e1bcf5d31c140e3b90268a23387366e30b072e92f46f511ca4c61d7ac
-
Size
55KB
-
MD5
a8d24e4305b4afadd1f824ecb45c5353
-
SHA1
bb2142242e12fc4af25d7ec10ade887e6fc269d7
-
SHA256
cf74e11e1bcf5d31c140e3b90268a23387366e30b072e92f46f511ca4c61d7ac
-
SHA512
6097066f252674f49bc6aa2d26cd48f007569f9e99b789ececf17173ceec182e753961ccf2a18756959e5ef8ddeb0a568ecf53b8c8e81afbb87c74074bfb9601
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJVJ3H:V7Zf/FAxTWoJJ7TPUOJ3HJ3J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf74e11e1bcf5d31c140e3b90268a23387366e30b072e92f46f511ca4c61d7ac
Files
-
cf74e11e1bcf5d31c140e3b90268a23387366e30b072e92f46f511ca4c61d7ac.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE