Behavioral task
behavioral1
Sample
ddf5647e3f6a33b106a54c7b93e1c88b.exe
Resource
win7-20231215-en
General
-
Target
ddf5647e3f6a33b106a54c7b93e1c88b
-
Size
784KB
-
MD5
ddf5647e3f6a33b106a54c7b93e1c88b
-
SHA1
b7b527f13e594500bb6e811fbb28a786f7cd3405
-
SHA256
bc5481c633a86a5201750fce29bc0aad33ebd5c10c6ac2af37bfdb40855f202c
-
SHA512
a2422f35eeeb3ff7ca175c23e84c85db0be0f1075118f83e93eeb1671644009aaa5fc16f915f84d6ea60854565b9d2b1caa574ace3060e31f369c2c70ac9c79a
-
SSDEEP
12288:JRaOZfhMGVqc0LUD/Zue5jtgN+keqBqWxHW6pQXFJOz4XFpA+nb9QC8U:C8r5QagN+BqBqed6FIMTnb9mU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddf5647e3f6a33b106a54c7b93e1c88b
Files
-
ddf5647e3f6a33b106a54c7b93e1c88b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE