Behavioral task
behavioral1
Sample
dec7cfba01d8ac5d0211660ea636dabd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
dec7cfba01d8ac5d0211660ea636dabd.exe
Resource
win10v2004-20231215-en
General
-
Target
dec7cfba01d8ac5d0211660ea636dabd
-
Size
1.2MB
-
MD5
dec7cfba01d8ac5d0211660ea636dabd
-
SHA1
ff0b1b0e5198133ab08d88b2836b3b7bf360cc5b
-
SHA256
50312f19007c8d2928d2c943ff05e72169738d7b58d66a3dc3822f5e91476a29
-
SHA512
c352ae5fb893f5d12b51f60cbc3855c6c5c9d32b8efbb9f3e4ca621b68ae92f7fbd3d131a982bc09fc8ae8ae1fbaecb844c2649e4e3c3073ce7b5768f47f2b71
-
SSDEEP
24576:ln9/fVkVQCjdQ5+uav4NVaen0mQCjdQ5+uav4NVa:lndfeVQeC5+dsVae0mQeC5+dsVa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dec7cfba01d8ac5d0211660ea636dabd
Files
-
dec7cfba01d8ac5d0211660ea636dabd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE