Behavioral task
behavioral1
Sample
df878743c30f4f41c3e56bf21e60a925ffa2a7fb722d68bc8e98793a8cfe87e3.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
df878743c30f4f41c3e56bf21e60a925ffa2a7fb722d68bc8e98793a8cfe87e3.exe
Resource
win10v2004-20231025-en
General
-
Target
df878743c30f4f41c3e56bf21e60a925ffa2a7fb722d68bc8e98793a8cfe87e3
-
Size
32KB
-
MD5
dd5b71a4b8889070220b7f953ae21494
-
SHA1
0efe9434977abb7f499a48aa98dd592a1d1a3469
-
SHA256
df878743c30f4f41c3e56bf21e60a925ffa2a7fb722d68bc8e98793a8cfe87e3
-
SHA512
bfb311421eb2398abd709d5eabd1ab20a26711bfd99418b7945fcf14cbecb14d9a921c1eaf7a54a35345dc7222f87114e5779338e65bed9fa551002c5392cd95
-
SSDEEP
192:pvxJqAPhpeS1ZK4O3CDHLLlzMZl4vl10GPdYPmVI+tTpXXXcEukUqU4ubvRxKmFb:fUAPk2MZlm5P6d+tTZcS64uFQmFb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df878743c30f4f41c3e56bf21e60a925ffa2a7fb722d68bc8e98793a8cfe87e3
Files
-
df878743c30f4f41c3e56bf21e60a925ffa2a7fb722d68bc8e98793a8cfe87e3.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE