Behavioral task
behavioral1
Sample
d71aff486c8d72171aa41d58fe6464b08fc1b14e134ea903eb9ccda336273bcb.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d71aff486c8d72171aa41d58fe6464b08fc1b14e134ea903eb9ccda336273bcb.exe
Resource
win10v2004-20230220-en
General
-
Target
d71aff486c8d72171aa41d58fe6464b08fc1b14e134ea903eb9ccda336273bcb
-
Size
406KB
-
MD5
a01c7b9bcd18fcb5850b83bf441f8689
-
SHA1
e958cc1efb512001a7702b0b96563dd7cbe9b49d
-
SHA256
d71aff486c8d72171aa41d58fe6464b08fc1b14e134ea903eb9ccda336273bcb
-
SHA512
23aab9dc6ea894dc16d01a9be89ec01866a2708c519586d97454fd08ff430405789157add1c75cd55de0d68b8d784f9f2691dd091f242e5a3470bdfa2b1e0f1a
-
SSDEEP
6144:eNjqTV//sRk1m4ZEO1A5YYtiVOFjAL3G148fSFL1nbRnL4iZzheE:eNySkms1xYti4Fm3G14ZLlL7ZzheE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d71aff486c8d72171aa41d58fe6464b08fc1b14e134ea903eb9ccda336273bcb
Files
-
d71aff486c8d72171aa41d58fe6464b08fc1b14e134ea903eb9ccda336273bcb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 600KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 318KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE