Behavioral task
behavioral1
Sample
dcc4add52df414b5b98c52e2e81d32e4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
dcc4add52df414b5b98c52e2e81d32e4.exe
Resource
win10v2004-20231215-en
General
-
Target
dcc4add52df414b5b98c52e2e81d32e4
-
Size
3.0MB
-
MD5
dcc4add52df414b5b98c52e2e81d32e4
-
SHA1
d85c0b27d0b083e9628d767fdf6f1103eee07cd4
-
SHA256
543902a45f11a332a0bad299136b84fa918e5d8127dc64394c29352b47f82848
-
SHA512
9f4b080c21859dea50bf08e68a072e81fde87ee80072db32ef8cff09cc2790d5900b8e92f64728f98c42326af841b4a8a69e8b4868f8050a9e9f651ba8315340
-
SSDEEP
98304:FdHoCESF7AcakcibiqhMbMgOn7n0bcakcibiqhySnJ1UO6L+cakcibiqhMbr:Fd5ESBAdlirybMgOnkdlirgSDy+dlirm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcc4add52df414b5b98c52e2e81d32e4
Files
-
dcc4add52df414b5b98c52e2e81d32e4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE