Behavioral task
behavioral1
Sample
d29bd133fba536f69e774facfe3d98815fec1cbd7234f85b8b79e14474bdd44c.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d29bd133fba536f69e774facfe3d98815fec1cbd7234f85b8b79e14474bdd44c.exe
Resource
win10v2004-20230703-en
General
-
Target
d29bd133fba536f69e774facfe3d98815fec1cbd7234f85b8b79e14474bdd44c
-
Size
516KB
-
MD5
22f86a7abc41e402a3df60322e4f22b4
-
SHA1
9a6633524840f88a8513a50ebea480a54ff5ac5f
-
SHA256
d29bd133fba536f69e774facfe3d98815fec1cbd7234f85b8b79e14474bdd44c
-
SHA512
931eb66da66cc9fe3063940ac232a7e545064b718eee610bf95636f80537b0dbc0ebe63ef461251dcc44d25103da25ee8c076f37bf7a8fcdcd7487ec00467ecd
-
SSDEEP
3072:6tG1QjSasRaBTQZi7trbxQCG8rgoE7UTzAAAAAAARrwLhlLMvpbdfV:6tG1nRRETQZuLQCjmUArwLDM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d29bd133fba536f69e774facfe3d98815fec1cbd7234f85b8b79e14474bdd44c
Files
-
d29bd133fba536f69e774facfe3d98815fec1cbd7234f85b8b79e14474bdd44c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 616KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 411KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE