Behavioral task
behavioral1
Sample
d2a0a5dada42b338ef4fb7c8286a37ca6d08f4215a91c2b9dbeedb12153b8fdc.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d2a0a5dada42b338ef4fb7c8286a37ca6d08f4215a91c2b9dbeedb12153b8fdc.exe
Resource
win10v2004-20230831-en
General
-
Target
d2a0a5dada42b338ef4fb7c8286a37ca6d08f4215a91c2b9dbeedb12153b8fdc
-
Size
1.0MB
-
MD5
f20d4e5540c997e178ef299edd1a26b5
-
SHA1
a32cad18ca6a0e59f4113179b7079ce99dfd8a2e
-
SHA256
d2a0a5dada42b338ef4fb7c8286a37ca6d08f4215a91c2b9dbeedb12153b8fdc
-
SHA512
4eef8654b021444d809bd005e69b73d8e115fc68145527c1e51db2683897843fd2d192263ee73caa1c0950cde270617efa299df711395d9b6443551a5f7368d1
-
SSDEEP
6144:Ovf9K1cycbmK2f+m8fi4ejj43Pf+m8fi4ej6f+m8fi4ejHf+m8fi4ejmU6d1mUXk:oOK9qP43UqlqgqSUCoSWq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2a0a5dada42b338ef4fb7c8286a37ca6d08f4215a91c2b9dbeedb12153b8fdc
Files
-
d2a0a5dada42b338ef4fb7c8286a37ca6d08f4215a91c2b9dbeedb12153b8fdc.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 1000KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE