Behavioral task
behavioral1
Sample
ded6d50ec700f2b126bc6e4ae82c21faea1c8a588d06b80123677bae11036c26.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ded6d50ec700f2b126bc6e4ae82c21faea1c8a588d06b80123677bae11036c26.exe
Resource
win10v2004-20231020-en
General
-
Target
ded6d50ec700f2b126bc6e4ae82c21faea1c8a588d06b80123677bae11036c26
-
Size
56KB
-
MD5
dc95971a8c2db3aee71eb1b9b6ce17c6
-
SHA1
0a2050b35a41a9c64e33123cb139d62ee369cc98
-
SHA256
ded6d50ec700f2b126bc6e4ae82c21faea1c8a588d06b80123677bae11036c26
-
SHA512
2aedcd63198b4bc606869436c297b7404a73422ce84428b9c53ab62bca17c4243929072426ef598d92ed5c7327d12d32a9034bac77ef3a4a794c3bf069d250c7
-
SSDEEP
768:eMq9m/ZsybSg2ts4L3RLc/qjhsKmMJ0UtH/hY+JFfJcqfB/L/OoBN:Xqk/Zdic/qjh8MJDH++vCwLb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ded6d50ec700f2b126bc6e4ae82c21faea1c8a588d06b80123677bae11036c26
Files
-
ded6d50ec700f2b126bc6e4ae82c21faea1c8a588d06b80123677bae11036c26.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 26KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE