Behavioral task
behavioral1
Sample
db01fefe75d495ccb182f0d1b33e3b91.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
db01fefe75d495ccb182f0d1b33e3b91.exe
Resource
win10v2004-20231215-en
General
-
Target
db01fefe75d495ccb182f0d1b33e3b91
-
Size
3.9MB
-
MD5
db01fefe75d495ccb182f0d1b33e3b91
-
SHA1
280d1a91174c5baaf5f155be648ffcbbf9ffddaa
-
SHA256
295faf32ffe7631620b35f250e37a44bff4ea59d6a2e28ec32d2eab1cbbf97c4
-
SHA512
a9bc075a77c66da23a10494fcdda0fae730931464405954f860f1c8cbbec87aa76de984dffd5fdc42e6aa8705b2e1f1c2bc5465921fde1a13b46df943d587e1c
-
SSDEEP
98304:kcvBNfHA9zyULG+m7SkJ100dbjgA9zyULG+lE894MTxcrhBA9zyULG+m7SkJ1001:vvv4zLqHukJ9pzLqUElAxcrhezLqHukg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db01fefe75d495ccb182f0d1b33e3b91
Files
-
db01fefe75d495ccb182f0d1b33e3b91.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE