Behavioral task
behavioral1
Sample
cd7854a4f1678b2dd30cb7c547e5e369a1b5eb64d88904a69d4de7cccbff2c8c.exe
Resource
win7-20240704-en
General
-
Target
cd7854a4f1678b2dd30cb7c547e5e369a1b5eb64d88904a69d4de7cccbff2c8c
-
Size
259KB
-
MD5
7bb7a2254cc60ff418585ceab28d8941
-
SHA1
dddc456d1987ae06e6d7bd4414005cc86cd1883b
-
SHA256
cd7854a4f1678b2dd30cb7c547e5e369a1b5eb64d88904a69d4de7cccbff2c8c
-
SHA512
4c9fd49baf69ff19d4d4f29b652ddc3ffba407459a1850e948c8f1f89ed81f24f443b638bd599cb61086d5eaa6e1c81e7d221cf09f58fca426836edf3c0d7e82
-
SSDEEP
6144:f40IFNAoSr/3dc+cAUyY413KyVFVEKO3QCGSGdBs1UbpCF0C:CyoSDBN16IEJZGpdBij
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd7854a4f1678b2dd30cb7c547e5e369a1b5eb64d88904a69d4de7cccbff2c8c
Files
-
cd7854a4f1678b2dd30cb7c547e5e369a1b5eb64d88904a69d4de7cccbff2c8c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE