Behavioral task
behavioral1
Sample
cd5016a40d01f356ca96e7d9bbadff3efee773007185b1e4e067219eedbaa59eN.exe
Resource
win7-20240708-en
General
-
Target
cd5016a40d01f356ca96e7d9bbadff3efee773007185b1e4e067219eedbaa59eN
-
Size
384KB
-
MD5
673a547a4d0a2f4c6a04e203fb0aca40
-
SHA1
166cdf011e4e70659f6c5641c339addc44ace1a1
-
SHA256
cd5016a40d01f356ca96e7d9bbadff3efee773007185b1e4e067219eedbaa59e
-
SHA512
47462a68bd2d5b8a8cc9fe1b5c4a00217467dfb43a8fc137cbbeaed02a00b2a6c4157f706545b28016039af7d2f745bf0517980c34e34b0ba8e468783b4efee3
-
SSDEEP
6144:BYDhB6ActMiF/Pt6a15RGkPNJScIlk21DoPiIL3AYRYAe5mtk9eko67BvpDElLMw:q9BvctMixt35JPNJH21DoxLQYRYzmttr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd5016a40d01f356ca96e7d9bbadff3efee773007185b1e4e067219eedbaa59eN
Files
-
cd5016a40d01f356ca96e7d9bbadff3efee773007185b1e4e067219eedbaa59eN.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 512KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 263KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE