Behavioral task
behavioral1
Sample
ccbae88ed2106ad9d22da387fdd2f54dd6e5da5a65d98bedb859b2a00363085fN.exe
Resource
win7-20240729-en
General
-
Target
ccbae88ed2106ad9d22da387fdd2f54dd6e5da5a65d98bedb859b2a00363085fN
-
Size
162KB
-
MD5
005af96697ca78930481bc4ed77d4c10
-
SHA1
9bdb1293867ccba4447690cc5b2feaac542683c5
-
SHA256
ccbae88ed2106ad9d22da387fdd2f54dd6e5da5a65d98bedb859b2a00363085f
-
SHA512
8c5e8d34461d781f22a2708d273a52103331a38e90a9489c9238084c06360909e5edabb935cf1d9d07ec4bf569e0a6c2c1a34f671ec5f7382913742482dd0602
-
SSDEEP
1536:V7Zf/FAxTWoJJZENTBTYhQmTW7JJZENTBTYhQGfG:fny1tEuQFtEuQGfG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccbae88ed2106ad9d22da387fdd2f54dd6e5da5a65d98bedb859b2a00363085fN
Files
-
ccbae88ed2106ad9d22da387fdd2f54dd6e5da5a65d98bedb859b2a00363085fN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE