Behavioral task
behavioral1
Sample
dd6ae32e49591a83600ee7d5bcce7ddd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
dd6ae32e49591a83600ee7d5bcce7ddd.exe
Resource
win10v2004-20231215-en
General
-
Target
dd6ae32e49591a83600ee7d5bcce7ddd
-
Size
2.6MB
-
MD5
dd6ae32e49591a83600ee7d5bcce7ddd
-
SHA1
81da0867dad8ccc0c380581419845aa127e793c1
-
SHA256
dbfe7f511214fab87fd3ba0c8833bb752b7a22272fb3b99f37509a6c9b271483
-
SHA512
32436451f294ef1f79981a250449012aed9547b9875e644e3271fd2a2b1407975da4a23e57d02beeafca633a4978572baf9f86edb01d19f2b8bbf993375bf72c
-
SSDEEP
49152:ec/yBZKU+B6P/I873K1o6aIp13/uiWxgSzjyFJbGay3:xyzKYqDlo3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd6ae32e49591a83600ee7d5bcce7ddd
Files
-
dd6ae32e49591a83600ee7d5bcce7ddd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE