Behavioral task
behavioral1
Sample
d2d04562e24cfcafc005439795805f92.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d2d04562e24cfcafc005439795805f92.exe
Resource
win10v2004-20231215-en
General
-
Target
d2d04562e24cfcafc005439795805f92
-
Size
133KB
-
MD5
d2d04562e24cfcafc005439795805f92
-
SHA1
5ca364c7cdc4a9a7526447de04e6d5b30760d082
-
SHA256
a7326a8623dd992d8eeabb56339ebc5ed989240d389cf19c66a7a73408ba4e69
-
SHA512
df7b90741cc93b4c9138c940a1482ed1170427af900658c8449bd56ccc6071b72bbc88fa239c5ad8182cd0fcf770c2e43e17bf1f42313a8f2d7d01e8c78f75a4
-
SSDEEP
3072:ABOEiwZMqYdYPq2AeWhIe8qdFPu7KelbRl+CQ:AB9aqYB2rwAqDP2KelFlvQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2d04562e24cfcafc005439795805f92
Files
-
d2d04562e24cfcafc005439795805f92.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE