Behavioral task
behavioral1
Sample
d340e8de57281e3262b1a6b99955a9ae.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
d340e8de57281e3262b1a6b99955a9ae.exe
Resource
win10v2004-20231215-en
General
-
Target
d340e8de57281e3262b1a6b99955a9ae
-
Size
1.3MB
-
MD5
d340e8de57281e3262b1a6b99955a9ae
-
SHA1
7930f987d626440968c28a14839e83802a668734
-
SHA256
274557f6ca220cf5bb0964f6e8930930947f043ee301702996a103a15335283d
-
SHA512
aa62ac370336066c96002128383353d4229e4cab66a29b754115a69c3d0de714f5e1a736bcefc8a75a492796164bd6467e771cb0e1719054b7de31966bad3c13
-
SSDEEP
24576:6SXkuKCtSbpNbG55Q1y0+2dmpHM4BrGNbuNYedxnwuiFlMzuN1rvWc:6gMsCs6UMIQu2Zp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d340e8de57281e3262b1a6b99955a9ae
Files
-
d340e8de57281e3262b1a6b99955a9ae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE