Behavioral task
behavioral1
Sample
dde8506f508b243eabad7959c7895da5fb57ccb157f9101fd3a0a9271d3cd816.exe
Resource
win7-20230831-en
General
-
Target
dde8506f508b243eabad7959c7895da5fb57ccb157f9101fd3a0a9271d3cd816
-
Size
3.5MB
-
MD5
3e1285da2b688c86cd71da66dd6a87ae
-
SHA1
67766d11dc60ac70c7175d37848f4ea95d6ef493
-
SHA256
dde8506f508b243eabad7959c7895da5fb57ccb157f9101fd3a0a9271d3cd816
-
SHA512
58907258f241d80159034a6685da3a6aac10006f584663dd1850edbbd69aefff88fc4d4f17b1da7d1dda9b1aca083570a584509b842ca08c913631059d4522b1
-
SSDEEP
49152:aWBj/cc942bf/Qw8hp1CLs/hSRV83Eoya/IcYSBtfB2Qa+ESTTXkh7cwu4Nsu:02r/M5CLs8nVoFwfSfBflEST7kRcw2u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dde8506f508b243eabad7959c7895da5fb57ccb157f9101fd3a0a9271d3cd816
Files
-
dde8506f508b243eabad7959c7895da5fb57ccb157f9101fd3a0a9271d3cd816.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 492KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 938KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE