Behavioral task
behavioral1
Sample
d277792e5bdea7e12445aef9cea4b19e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
d277792e5bdea7e12445aef9cea4b19e.exe
Resource
win10v2004-20231215-en
General
-
Target
d277792e5bdea7e12445aef9cea4b19e
-
Size
133KB
-
MD5
d277792e5bdea7e12445aef9cea4b19e
-
SHA1
a05e8a4084e1082e95dd9d8665a1a25165e03f19
-
SHA256
cc20c83b90fd627c0423655307c9c5d5fe8b29ee11787f27224926532340dc62
-
SHA512
7d3ff3a6b84ee907c20ebc5066d98ad1abbc71894d1dd6a6a447e59e008961db34e0f5a3b728901965733e4b8f47f686e2c029b9f086a99322998473c9666a7f
-
SSDEEP
3072:5qFuRAeV9faLZrtbdZ0iQDCeKEcQE1r5mNWX9XibJf0gKf/Q:4cAKfaDdqDCeKqE1r5m69XAyZnQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d277792e5bdea7e12445aef9cea4b19e
Files
-
d277792e5bdea7e12445aef9cea4b19e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE