Behavioral task
behavioral1
Sample
dd724db9b4cf033f06715b74cbf4c3d6e15a6fb99456c8171032623b67636475.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
dd724db9b4cf033f06715b74cbf4c3d6e15a6fb99456c8171032623b67636475.exe
Resource
win10v2004-20230824-en
General
-
Target
dd724db9b4cf033f06715b74cbf4c3d6e15a6fb99456c8171032623b67636475
-
Size
952KB
-
MD5
06658246cad3bca9e9636299f98a0918
-
SHA1
f4c0ab9c56adb9cb8383c6e5f61631b92562a579
-
SHA256
dd724db9b4cf033f06715b74cbf4c3d6e15a6fb99456c8171032623b67636475
-
SHA512
bbdd5dfaa7618025519345d180c72630bc0929b0289de9152b4a60894e4fcd9ff59fd8c65f10b0f379dd947f050feeb53aa1dff5d4df1746bdc8595c5c707d82
-
SSDEEP
6144:ubnuybEZ7Qea/6ApVkCGWnXKYfw4iiWR2BNPoDYnHF6r6+tJXPDQkrpBjzn0d1ah:M+na//zGI1fw4iiFfPdwrhXPDQXd1yz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd724db9b4cf033f06715b74cbf4c3d6e15a6fb99456c8171032623b67636475
Files
-
dd724db9b4cf033f06715b74cbf4c3d6e15a6fb99456c8171032623b67636475.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 880KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE