Behavioral task
behavioral1
Sample
dd2f4431d6c39a2b3d395026f34f131d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
dd2f4431d6c39a2b3d395026f34f131d.exe
Resource
win10v2004-20231215-en
General
-
Target
dd2f4431d6c39a2b3d395026f34f131d
-
Size
765KB
-
MD5
dd2f4431d6c39a2b3d395026f34f131d
-
SHA1
0d87d3ccd5abeb76fc2e1d07ab6fd3bd2d700096
-
SHA256
aa1f15d12149c9f34d8d9011e05b31de41382f53eb5ef3a54df3d64014cd2adf
-
SHA512
d69fca78b66260b4cc890a9766bcec7473d7f02496b9c85439db453f9a2eace0bb5811ec17914124440d3d421bf5ad415424967f8798b36036ab929f0bf3e720
-
SSDEEP
12288:udMUxnSE/MioRP2MPZdTXm17q4M+Ka6BKNvViMflO9dJ5IECpxOokLZsY:EMQFkPFPZ9Xp40a6A/cjukL2Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd2f4431d6c39a2b3d395026f34f131d
Files
-
dd2f4431d6c39a2b3d395026f34f131d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE